STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 10 Release: 7 Benchmark Date: 24 Oct 2024:

The Intrusion Detection and Prevention System (IDPS) configuration must be backed up before applying software or signature updates, or when making changes to the configuration.

DISA Rule

SV-251344r805987_rule

Vulnerability Number

V-251344

Group Title

NET-IDPS-031

Rule Version

NET-IDPS-031

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Establish backup procedures and define directories to store the configuration settings and operating system versions.

Check Contents

Interview the SA to determine the IDPS maintenance procedures as well as have SA display the backup files saved on the file server.

If the IDPS configuration is not backed up prior to applying software or signature updates, or when making changes to the configuration, this is a finding.

Vulnerability Number

V-251344

Documentable

False

Rule Version

NET-IDPS-031

Severity Override Guidance

Interview the SA to determine the IDPS maintenance procedures as well as have SA display the backup files saved on the file server.

If the IDPS configuration is not backed up prior to applying software or signature updates, or when making changes to the configuration, this is a finding.

Check Content Reference

M

Target Key

5444