STIGQter: STIG Summary: Trend Micro TippingPoint IDPS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 24 Oct 2024:

The Trend Micro TPS must immediately use updates made to policy filters, rules, signatures, and anomaly analysis algorithms for traffic detection and prevention functions which are all contained in the Digital Vaccine (DV) updates.

DISA Rule

SV-242175r710068_rule

Vulnerability Number

V-242175

Group Title

SRG-NET-000019-IDPS-00187

Rule Version

TIPP-IP-000090

Severity

CAT II

CCI(s)

CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

Fix Recommendation

1. In the Trend Micro SMS interface, go to the "Profiles" and then "Digital Vaccines".
2. Check the latest DV version that is downloaded/imported and is active. Go the Trend Micro support system located here: https://tmc.tippingpoint.com/TMC/Releases
3. Under Digital Vaccines, select the DV major version (3.2.0 currently).
4. Download the latest signature file (e.g. SIG_3.2.0_9404.pkg).
5. Read the EULA acceptance notice, then select Accept.
6. Under an approved network change window, go back to the SMS, Profiles, and Digital Vaccines.
7. Select "import", then select the file downloaded from the TMC site.
8. Once prompted, select distribute to all TPS devices in the network.

Check Contents

1. In the Trend Micro SMS interface, go to the "Profiles" and then "Digital Vaccines".
2. Check the latest DV version that is downloaded/imported and is active. Go the Trend Micro support system located here: https://tmc.tippingpoint.com/TMC/Releases
3. Under Digital Vaccines, select the DV major version (3.2.0 currently).
4. Ensure the latest signature release is the current one that is applied to the SMS and is active to all TPS systems in the network.

If the latest one is not applied as the Active DV version, this is a finding.

Vulnerability Number

V-242175

Documentable

False

Rule Version

TIPP-IP-000090

Severity Override Guidance

1. In the Trend Micro SMS interface, go to the "Profiles" and then "Digital Vaccines".
2. Check the latest DV version that is downloaded/imported and is active. Go the Trend Micro support system located here: https://tmc.tippingpoint.com/TMC/Releases
3. Under Digital Vaccines, select the DV major version (3.2.0 currently).
4. Ensure the latest signature release is the current one that is applied to the SMS and is active to all TPS systems in the network.

If the latest one is not applied as the Active DV version, this is a finding.

Check Content Reference

Target Key

5367