STIGQter STIGQter: STIG Summary: Cloud Computing Mission Owner Network Security Requirements Guide Version: 1 Release: 2 Benchmark Date: 30 Jan 2025:

For Infrastructure as a Service (IaaS)/Platform as a Service (PaaS), the Mission Owner must configure an intrusion detection and prevention system (IDPS) to protect DOD virtual machines (VMs), services, and applications.

DISA Rule

SV-259867r945589_rule

Vulnerability Number

V-259867

Group Title

SRG-NET-000383

Rule Version

SRG-NET-000383-CLD-000105

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

This applies to all Impact Levels.
FedRAMP Moderate, High.

Configure a virtual IDPS to monitor and protect the DOD VMs, services, and applications.

Check Contents

If this is a Software as a Service (SaaS), this is not applicable.

Review the Service Level Agreement and architecture documentation. Verify the virtual IDPS is in place by inspecting the architecture diagrams. Verify it is placed to monitor and protect the IaaS, PaaS, and interconnected host VMs.

Verify a secure (encrypted) connection exists between the virtual IDPS capabilities and the CSSP responsible for the mission system/application.

If the Mission Owner has not configured the IaaS or PaaS IDPS to monitor and protect the IaaS and interconnected VMs, this is a finding.

Vulnerability Number

V-259867

Documentable

False

Rule Version

SRG-NET-000383-CLD-000105

Severity Override Guidance

If this is a Software as a Service (SaaS), this is not applicable.

Review the Service Level Agreement and architecture documentation. Verify the virtual IDPS is in place by inspecting the architecture diagrams. Verify it is placed to monitor and protect the IaaS, PaaS, and interconnected host VMs.

Verify a secure (encrypted) connection exists between the virtual IDPS capabilities and the CSSP responsible for the mission system/application.

If the Mission Owner has not configured the IaaS or PaaS IDPS to monitor and protect the IaaS and interconnected VMs, this is a finding.

Check Content Reference

M

Target Key

5583