STIGQter: STIG Summary: IBM zVM Using CA VM:Secure Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 27 Oct 2022:

All IBM z/VM TCP/IP Ports must be restricted to ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

DISA Rule

SV-237918r649594_rule

Vulnerability Number

V-237918

Group Title

SRG-OS-000096-GPOS-00050

Rule Version

IBMZ-VM-000630

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Configure the application server definition in TCP/IP configuration file to disable any ports or protocols that are prohibited by the PPSM CAL and vulnerability assessments.

Check Contents

For each TCP/IP server defined examine the TCP/IP Configuration Port Statements.

Consult DISA Ports, Protocols, and Services Management (PPSM) Category Assurance Levels (CAL).

Verify that the ports and protocols being used are not prohibited and are necessary for the operation of the application server and the hosted applications.

If any of the ports or protocols is prohibited or not necessary for the application server operation, this is a finding.

Vulnerability Number

V-237918

Documentable

False

Rule Version

IBMZ-VM-000630

Severity Override Guidance

For each TCP/IP server defined examine the TCP/IP Configuration Port Statements.

Consult DISA Ports, Protocols, and Services Management (PPSM) Category Assurance Levels (CAL).

Verify that the ports and protocols being used are not prohibited and are necessary for the operation of the application server and the hosted applications.

If any of the ports or protocols is prohibited or not necessary for the application server operation, this is a finding.

Check Content Reference

M

Target Key

5306