STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 10 Release: 7 Benchmark Date: 24 Oct 2024:

An Intrusion Detection and Prevention System (IDPS) sensor must be deployed to monitor the network segment hosting web, application, and database servers.

DISA Rule

SV-251336r853643_rule

Vulnerability Number

V-251336

Group Title

NET-IDPS-018

Rule Version

NET-IDPS-018

Severity

CAT II

CCI(s)

CCI-001097 - Monitor and control communications at the external managed interfaces to the system and at key managed interfaces within the system.
CCI-001255 - Invoke internal monitoring capabilities or deploy monitoring devices strategically within the system to collect organization-determined essential information.
CCI-002668 - Defines the interior points within the system where outbound communications will be analyzed to discover anomalies.

Weight

Fix Recommendation

Implement an IDPS strategy to monitor the network segment hosting web, application, and database servers.

Check Contents

Review topology of the network segment hosting the web, application, and database servers.

If this segment is not being monitored by an IDPS sensor, this is a finding.

Vulnerability Number

V-251336

Documentable

False

Rule Version

NET-IDPS-018

Severity Override Guidance

Review topology of the network segment hosting the web, application, and database servers.

If this segment is not being monitored by an IDPS sensor, this is a finding.

Check Content Reference

Target Key

5444