STIGQter: STIG Summary: AAA Services Security Requirements Guide Version: 2 Release: 2 Benchmark Date: 30 Jan 2025:

AAA Services must be configured to protect the confidentiality and integrity of all information at rest.

DISA Rule

SV-204679r961128_rule

Vulnerability Number

V-204679

Group Title

SRG-APP-000231

Rule Version

SRG-APP-000231-AAA-000610

Severity

CAT I

CCI(s)

• CCI-001199 - Protects the confidentiality and/or integrity of organization-defined information at rest.

Weight

10

Fix Recommendation

Configure AAA Services to protect the confidentiality and integrity of all information at rest. AAA Services may leverage the capability of an operating system or require the use of a purpose-built module for this purpose. Potential locations include the local file system where configurations and events are stored or in a related database table.

Check Contents

Verify AAA Services are configured to protect the confidentiality and integrity of all information at rest. AAA Services may leverage the capability of an operating system or purpose-built module for this purpose. Potential locations include the local file system where configurations and events are stored or in a related database table.

If AAA Services are not configured to protect the confidentiality and integrity of all information at rest, this is a finding.

Vulnerability Number

V-204679

Documentable

False

Rule Version

SRG-APP-000231-AAA-000610

Severity Override Guidance

Verify AAA Services are configured to protect the confidentiality and integrity of all information at rest. AAA Services may leverage the capability of an operating system or purpose-built module for this purpose. Potential locations include the local file system where configurations and events are stored or in a related database table.

If AAA Services are not configured to protect the confidentiality and integrity of all information at rest, this is a finding.

Check Content Reference

M

Target Key

2896