STIGQter: STIG Summary: Layer 2 Switch Security Technical Implementation Guide Version: 8 Release: 27 Benchmark Date: 25 Jan 2019: Network devices must have DNS servers defined if it is configured as a client resolver.

DISA Rule

SV-3020r3_rule

Vulnerability Number

V-3020

Group Title

DNS servers must be defined for client resolver.

Rule Version

NET0820

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the device to include DNS servers or disable domain lookup.

Check Contents

Review the device configuration to ensure DNS servers have been defined if it has been configured as a client resolver (name lookup).

If the device is configured as a client resolver and DNS servers are not defined, this is a finding.

Vulnerability Number

V-3020

Documentable

False

Rule Version

NET0820

Severity Override Guidance

Review the device configuration to ensure DNS servers have been defined if it has been configured as a client resolver (name lookup).

If the device is configured as a client resolver and DNS servers are not defined, this is a finding.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

512

Comments