STIGQter: STIG Summary: Trend Micro TippingPoint IDPS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 24 Oct 2024:

The TPS must fail to a secure state which maintains access control mechanisms when the IDPS hardware, software, or firmware fails on initialization/shutdown or experiences a sudden abort during normal operation (also known as "Fail closed").

DISA Rule

SV-242191r710116_rule

Vulnerability Number

V-242191

Group Title

SRG-NET-000235-IDPS-00169

Rule Version

TIPP-IP-000260

Severity

CAT II

CCI(s)

• CCI-001190 - Fail to an organization-defined known-system state for the following failures on the indicated components while preserving organization-defined system state information in failure.

Weight

10

Fix Recommendation

1. In the Trend Micro SMS, navigate to "Devices".
2. Select the device that will be modified, then select "Network Configuration".
3. Click each segment that is currently operational.
a. Click "Edit".
b. Under "Link Down Synchronization" select "Block All" and ensure the Link Down Synchronization Mode is "Wire" and 1 second wait time.
c. Select Finish.

Check Contents

1. In the Trend Micro SMS, navigate to "Devices".
2. Select the device that will be modified, then select "Network Configuration".

If any of the Intrinsic HA items state Permit All, this is a finding.

Vulnerability Number

V-242191

Documentable

False

Rule Version

TIPP-IP-000260

Severity Override Guidance

1. In the Trend Micro SMS, navigate to "Devices".
2. Select the device that will be modified, then select "Network Configuration".

If any of the Intrinsic HA items state Permit All, this is a finding.

Check Content Reference

M

Target Key

5367