STIGQter: STIG Summary: Riverbed NetProfiler Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Riverbed NetProfiler must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.

DISA Rule

SV-256094r997792_rule

Vulnerability Number

V-256094

Group Title

SRG-APP-000516-NDM-000344

Rule Version

RINP-DM-000061

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.
CCI-001159 - Issue public key certificates under an organization-defined certificate policy or obtain public key certificates from an approved service provider.
CCI-004068 - For public key-based authentication, implement a local cache of revocation data to support path discovery and validation.

Weight

Fix Recommendation

Go to Configuration >> Appliance Security >> Encryption Key Management.

Under the "Local Credentials" tab, look for the "Apache SSL certificate".

Under the "Action" column, click the drop-down menu and select "Change Key/Cert".

Paste the private key and certificate in PEM format and click "Save".

Restart the web browser to avoid connection errors.

Check Contents

Go to Configuration >> Appliance Security >> Encryption Key Management.

Under the "Local Credentials" tab, look for the "Apache SSL certificate".

Under the "Action" column, click the drop-down menu and select "View Certificate".

Verify the Privacy Enhanced Mail (PEM) format for the certificate and key match the certification authority-provided certificate and the certificate is signed by a DOD-approved certificate authority.

If this is not true, this is a finding.

Vulnerability Number

V-256094

Documentable

False

Rule Version

RINP-DM-000061

Severity Override Guidance

Go to Configuration >> Appliance Security >> Encryption Key Management.

Under the "Local Credentials" tab, look for the "Apache SSL certificate".

Under the "Action" column, click the drop-down menu and select "View Certificate".

Verify the Privacy Enhanced Mail (PEM) format for the certificate and key match the certification authority-provided certificate and the certificate is signed by a DOD-approved certificate authority.

If this is not true, this is a finding.

Check Content Reference

Target Key

5514