STIGQter STIGQter: STIG Summary: Infoblox 8.x DNS Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

Infoblox systems that perform zone transfers to non-Grid DNS service members must limit the number of concurrent sessions for zone transfers.

DISA Rule

SV-233855r1082600_rule

Vulnerability Number

V-233855

Group Title

SRG-APP-000001-DNS-000001

Rule Version

IDNS-8X-100001

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

1. Navigate to Data Management >> DNS >> Members tab.
2. Click "Edit" to review each member with the DNS service status of "Running".
3. Toggle Advanced Mode and select General >> Advanced tab.
4. Configure both inbound and outbound zone transfer to appropriate values.
5. When complete, click "Save & Close" to save the changes and exit the "Properties" screen.
6. Perform a service restart if necessary.

Check Contents

Verify inbound and outbound zone transfer limits are configured. These values control the amount of concurrent zone transfers to non-Grid DNS service members.

1. Navigate to Data Management >> DNS >> Members tab.
2. Review each server with the DNS service enabled.
3. Select each server, click "Edit", toggle Advanced Mode, and then select General >> Advanced tab.
4. Verify zone transfer limitations are configured.
5. When complete, click "Cancel" to exit the "Properties" screen.

If zone transfer limits are not configured for non-Infoblox grid DNS service members, this is a finding.

Vulnerability Number

V-233855

Documentable

False

Rule Version

IDNS-8X-100001

Severity Override Guidance

Verify inbound and outbound zone transfer limits are configured. These values control the amount of concurrent zone transfers to non-Grid DNS service members.

1. Navigate to Data Management >> DNS >> Members tab.
2. Review each server with the DNS service enabled.
3. Select each server, click "Edit", toggle Advanced Mode, and then select General >> Advanced tab.
4. Verify zone transfer limitations are configured.
5. When complete, click "Cancel" to exit the "Properties" screen.

If zone transfer limits are not configured for non-Infoblox grid DNS service members, this is a finding.

Check Content Reference

M

Target Key

5251