STIGQter: STIG Summary: Trend Micro TippingPoint IDPS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 24 Oct 2024:

The TPS must send an alert to, at a minimum, the ISSM and ISSO when intrusion detection events are detected which indicate a compromise or potential for compromise.

DISA Rule

SV-242205r971533_rule

Vulnerability Number

V-242205

Group Title

SRG-NET-000392-IDPS-00214

Rule Version

TIPP-IP-000430

Severity

CAT II

CCI(s)

• CCI-002664 - Alert organization-defined personnel or roles when organization-defined compromise indicators generate the occurrence of a compromise or a potential compromise.

Weight

10

Fix Recommendation

1. In the Trend Micro SMS, navigate to "Profiles" and "Shared Settings".
2. Under "Action Sets":
a. Select "Block+Notify" and Edit.
b. Select Notifications, click "add", and add an email address for the ISSO and the aggregation time in minutes.
c. Select "Finish".

Check Contents

1. In the Trend Micro SMS, navigate to "Profiles" and "Shared Settings".
2. Under "Action Sets", if a group email address for the ISSO is not added for both the "Block+Notify" and "Block+Notify+Trace", this is a finding.

Vulnerability Number

V-242205

Documentable

False

Rule Version

TIPP-IP-000430

Severity Override Guidance

1. In the Trend Micro SMS, navigate to "Profiles" and "Shared Settings".
2. Under "Action Sets", if a group email address for the ISSO is not added for both the "Block+Notify" and "Block+Notify+Trace", this is a finding.

Check Content Reference

M

Target Key

5367