STIGQter: STIG Summary: AvePoint DocAve 6 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Aug 2022:

DocAve must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

DISA Rule

SV-253514r841862_rule

Vulnerability Number

V-253514

Group Title

SRG-APP-000142

Rule Version

DCAV-00-000054

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Configure the DocAve Manager communication port setting.
- On the DocAve 6 Manager server, open DocAve 6 Manager Configuration Tool.
- Click "Control Service Configuration" on the left.
- Change the Website Port.
- Click "Media Service Configuration" on the left.
- Change the Media Service Port and Media Service Data Port.
- Click "Report Service Configuration" on the left.
- Change the Report Service Port.
- Click "OK" to save settings.

Configure the DocAve Agent communication port setting.
- On the DocAve 6 Agent server, open DocAve 6 Agent Configuration Tool.
- Navigate to the Host And Port panel.
- Change the Agent Port.
- Click "OK" to save settings.

Configure the DocAve Control Service update port setting.
- Log on to DocAve with admin account.
- On the Control Panel page, in the Update Manager section, click "Update Manager", then click "Update Settings" button.
- Navigate to the Update Port section.
- Change the Update Port.
- Click Save button to save settings.

Check Contents

Check the DocAve Manager communication port setting.
- On the DocAve 6 Manager server, open DocAve 6 Manager Configuration Tool from the Start Menu.
- Click "Control Service Configuration" on the left.
- Verify the Website Port.
- Click "Media Service Configuration" on the left.
- Verify the Media Service Port and Media Service Data Port.
- Click "Report Service Configuration" on the left.
- Verify the Report Service Port.

If any of these ports used by the DocAve Manager Services are not in accordance with the PPSM CAL, or otherwise AO Approved, this is a finding.

Check the DocAve Agent communication port setting.
- On the DocAve 6 Agent server, open DocAve 6 Agent Configuration Tool.
- Navigate to the Host And Port panel.
- Verify the Agent Port.

If the Agent Port is are not in accordance with the PPSM CAL, or otherwise AO Approved, this is a finding.

Check the DocAve Control Service update port setting.
- Log on to DocAve with admin account.
- On the Control Panel page, in the Update Manager section, click "Update Manager", then click "Update Settings".
- Navigate to the Update Port section.
- Verify the Update Port.

If the Update Port is are not in accordance with the PPSM CAL, or otherwise AO Approved, this is a finding.

Vulnerability Number

V-253514

Documentable

False

Rule Version

DCAV-00-000054

Severity Override Guidance

Check the DocAve Manager communication port setting.
- On the DocAve 6 Manager server, open DocAve 6 Manager Configuration Tool from the Start Menu.
- Click "Control Service Configuration" on the left.
- Verify the Website Port.
- Click "Media Service Configuration" on the left.
- Verify the Media Service Port and Media Service Data Port.
- Click "Report Service Configuration" on the left.
- Verify the Report Service Port.

If any of these ports used by the DocAve Manager Services are not in accordance with the PPSM CAL, or otherwise AO Approved, this is a finding.

Check the DocAve Agent communication port setting.
- On the DocAve 6 Agent server, open DocAve 6 Agent Configuration Tool.
- Navigate to the Host And Port panel.
- Verify the Agent Port.

If the Agent Port is are not in accordance with the PPSM CAL, or otherwise AO Approved, this is a finding.

Check the DocAve Control Service update port setting.
- Log on to DocAve with admin account.
- On the Control Panel page, in the Update Manager section, click "Update Manager", then click "Update Settings".
- Navigate to the Update Port section.
- Verify the Update Port.

If the Update Port is are not in accordance with the PPSM CAL, or otherwise AO Approved, this is a finding.

Check Content Reference

M

Target Key

5472