STIGQter STIGQter: STIG Summary: Infoblox 8.x DNS Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

All authoritative DNS service members for a zone must be located on different network segments.

DISA Rule

SV-233864r1156953_rule

Vulnerability Number

V-233864

Group Title

SRG-APP-000516-DNS-000087

Rule Version

IDNS-8X-400006

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

1. Navigate to Data Management >> DNS >> Zones.
2. Review zone settings by selecting each zone and reviewing the "DNS Name Server" tab to ensure all DNS service members are located on different network segments.

Check Contents

Review the DNS configuration to determine all of the DNS service member records for each zone. Based on the NS records for each zone and network architecture, determine the location of each of the DNS service members.

1. Navigate to Data Management >> DNS >> Zones.
2. Select the zone to review.
3. Select the "DNS Name Servers" tab.

If all authoritative DNS service members are not located on different network segments, this is a finding.

Vulnerability Number

V-233864

Documentable

False

Rule Version

IDNS-8X-400006

Severity Override Guidance

Review the DNS configuration to determine all of the DNS service member records for each zone. Based on the NS records for each zone and network architecture, determine the location of each of the DNS service members.

1. Navigate to Data Management >> DNS >> Zones.
2. Select the zone to review.
3. Select the "DNS Name Servers" tab.

If all authoritative DNS service members are not located on different network segments, this is a finding.

Check Content Reference

M

Target Key

5251