STIGQter: STIG Summary: Intrusion Detection and Prevention Systems Security Requirements Guide Version: 3 Release: 4 Benchmark Date: 28 Oct 2025:

The IDPS must automatically update malicious code protection mechanisms as new releases are available in accordance with organizational configuration management policy.

DISA Rule

SV-206892r982260_rule

Vulnerability Number

V-206892

Group Title

SRG-NET-000251

Rule Version

SRG-NET-000251-IDPS-00178

Severity

CAT II

CCI(s)

• CCI-004964 - Automatically update malicious code protection mechanisms as new releases are available in accordance with organizational configuration management policy.

Weight

10

Fix Recommendation

Configure the IDPS to automatically install updates to signature definitions, detection heuristics, and vendor-provided rules.

Check Contents

Verify the IDPS automatically installs updates to signature definitions, detection heuristics, and vendor-provided rules.

If the IDPS does not automatically install updates to signature definitions, detection heuristics, and vendor-provided rules, this is a finding.

Vulnerability Number

V-206892

Documentable

False

Rule Version

SRG-NET-000251-IDPS-00178

Severity Override Guidance

Verify the IDPS automatically installs updates to signature definitions, detection heuristics, and vendor-provided rules.

If the IDPS does not automatically install updates to signature definitions, detection heuristics, and vendor-provided rules, this is a finding.

Check Content Reference

M

Target Key

2918