STIGQter STIGQter: STIG Summary: Infoblox 7.x DNS Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 22 Jan 2021:

The IP address for hidden master authoritative name servers must not appear in the name servers set in the zone database.

DISA Rule

SV-214215r612370_rule

Vulnerability Number

V-214215

Group Title

SRG-APP-000516-DNS-000108

Rule Version

IDNS-7X-000880

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

For each zone that is not in compliance reconfigure the "Name Servers" tab and modify the Grid Master by selecting "Stealth".

When complete, click "Save & Close" to save the changes and exit the "Properties" screen.

Perform a service restart if necessary.

Check Contents

The Infoblox Grid Master should not be configured to service DNS requests from clients.

Navigate to Data Management >> DNS >> Zones.

Review each zone by selecting the zone and clicking "Edit", and selecting the "Name Servers" tab.

If the Grid Master is a listed name server and not marked "Stealth", this is a finding.

Vulnerability Number

V-214215

Documentable

False

Rule Version

IDNS-7X-000880

Severity Override Guidance

The Infoblox Grid Master should not be configured to service DNS requests from clients.

Navigate to Data Management >> DNS >> Zones.

Review each zone by selecting the zone and clicking "Edit", and selecting the "Name Servers" tab.

If the Grid Master is a listed name server and not marked "Stealth", this is a finding.

Check Content Reference

M

Target Key

3995

Comments