STIGQter: STIG Summary: Infoblox 7.x DNS Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 22 Jan 2021:

The Infoblox system must be configured to activate a notification to the system administrator when a component failure is detected.

DISA Rule

SV-214180r612370_rule

Vulnerability Number

V-214180

Group Title

SRG-APP-000268-DNS-000039

Rule Version

IDNS-7X-000370

Severity

CAT II

CCI(s)

• CCI-001328 - The organization, if an information system component failure is detected, activates an organization-defined alarm and/or automatically shuts down the information system.
• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Navigate to "Grid" tab and edit "Grid Properties", toggle Advanced Mode, and review "Monitoring", "SNMP", "SNMP Threshold", "Email" and "Notifications" tab.

Configure remote SYSLOG, Email, or SNMP notifications.
When complete, click "Save & Close" to save the changes and exit the "Properties" screen.

Perform a service restart if necessary.

Check Contents

Infoblox systems are capable of providing notifications via remote SYSLOG, SNMP, and SMTP.

Navigate to the "Grid" tab and select "Grid Properties", toggle Advanced Mode, and review "Monitoring", "SNMP", "SNMP Threshold", "Email", and "Notifications" tabs.
When complete, click "Cancel" to exit the "Properties" screen.

If no external notifications are enabled, this is a finding.

Vulnerability Number

V-214180

Documentable

False

Rule Version

IDNS-7X-000370

Severity Override Guidance

Infoblox systems are capable of providing notifications via remote SYSLOG, SNMP, and SMTP.

Navigate to the "Grid" tab and select "Grid Properties", toggle Advanced Mode, and review "Monitoring", "SNMP", "SNMP Threshold", "Email", and "Notifications" tabs.
When complete, click "Cancel" to exit the "Properties" screen.

If no external notifications are enabled, this is a finding.

Check Content Reference

M

Target Key

3995

Comments