STIGQter: STIG Summary: ISEC7 Sphere Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The ISEC7 SPHERE must be configured to leverage the enterprise directory service accounts and groups for ISEC7 SPHERE server admin identification and authentication.

DISA Rule

SV-224773r1013833_rule

Vulnerability Number

V-224773

Group Title

SRG-APP-000516

Rule Version

ISEC-06-002510

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Log in to the ISEC7 SPHERE Console.
Navigate to Administration >> Configuration >> LDAP.
Select "Add new LDAP".
Provide the connection information for the enterprise LDAP connection.
Check the box "Use for Login".
Navigate to Administration >> Configuration >> Settings.
Set Log in using (Default) to the enterprise connection.

Check Contents

Log in to the ISEC7 SPHERE Console.
Navigate to Administration >> Configuration >> LDAP.
Verify that a LDAP entry has been configured to the enterprise.
Select "Edit" and confirm the "Use for Login" check box has been selected.
Navigate to Administration >> Configuration >> Settings.
Verify that Log in using (Default) has been set to the enterprise connection.

If a LDAP entry has not been configured to the enterprise or Log in using (Default) has not been set to the enterprise connection, this is a finding.

Vulnerability Number

V-224773

Documentable

False

Rule Version

ISEC-06-002510

Severity Override Guidance

Check Content Reference

Target Key

4200