STIGQter: STIG Summary: Infoblox 7.x DNS Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 22 Jan 2021:

The Infoblox NIOS version must be at the appropriate version.

DISA Rule

SV-214214r612370_rule

Vulnerability Number

V-214214

Group Title

SRG-APP-000516-DNS-000103

Rule Version

IDNS-7X-000860

Severity

CAT II

CCI(s)

CCI-000366 - The organization implements the security configuration settings.

Weight

Fix Recommendation

Log on to the support site and download the current version of NIOS and perform a Grid upgrade.

Refer to the Infoblox NIOS Administration Guide if necessary.

Check Contents

Infoblox systems utilize a modified version of BIND DNS software which adds features as well as addresses security issues outside of those provided by ISC. Infoblox systems are provided as a hardened appliance, and do not allow user access or upgrading of software components including BIND. The Infoblox support portal is the authoritative source to validate version and applicability of vulnerabilities.

Verify the NIOS version by review of "Grid, Upgrade" tab to show all members are at the current version.
Utilize the Infoblox support knowledgebase to obtain current version information.

If Infoblox NIOS is not at the current approved version level, this is a finding.

The Infoblox NIOS version must be at the appropriate version.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments