STIGQter: STIG Summary: Riverbed SteelHead CX v8 ALG Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 30 Nov 2015:

Riverbed Optimization System (RiOS) must not have unnecessary services and functions enabled.

DISA Rule

SV-77317r1_rule

Vulnerability Number

V-62827

Group Title

SRG-NET-000131-ALG-000086

Rule Version

RICX-AG-000087

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Check to see if services other than the authorized services are enabled for optimization.

Obtain documentation for which applications are approved/disapproved for optimization by the organization.

Navigate to the device Management Console
Navigate to Optimize >> Optimization

Set the approved or disapproved applications to enabled or disabled according to organization requirements.

Check Contents

Verify that the Riverbed Optimization System (RiOS) is configured to disable unrelated or unneeded application proxy services.

Obtain documentation for which applications are approved/disapproved for optimization by the organization.

Navigate to the device Management Console
Navigate to Optimize >> Optimization

Verify that the approved or disapproved applications are enabled or disabled according to organization requirements.

If optimization features are not enabled or disabled according to the organizations requirements, this is a finding.

Vulnerability Number

V-62827

Documentable

False

Rule Version

RICX-AG-000087

Severity Override Guidance

Verify that the Riverbed Optimization System (RiOS) is configured to disable unrelated or unneeded application proxy services.

Obtain documentation for which applications are approved/disapproved for optimization by the organization.

Navigate to the device Management Console
Navigate to Optimize >> Optimization

Verify that the approved or disapproved applications are enabled or disabled according to organization requirements.

If optimization features are not enabled or disabled according to the organizations requirements, this is a finding.

Check Content Reference

M

Target Key

2929

Comments