STIGQter: STIG Summary: DBN-6300 IDPS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 12 Sep 2017:

When implemented for discovery protection against unidentified or rogue databases, the DBN-6300 must provide a catalog of all visible databases and database services.

DISA Rule

SV-79549r1_rule

Vulnerability Number

V-65059

Group Title

SRG-NET-000512-IDPS-00194

Rule Version

DBNW-IP-000061

Severity

CAT II

CCI(s)

CCI-000366 - The organization implements the security configuration settings.

Weight

Fix Recommendation

Configure the system to view databases and database services.

Click on the Database >> Service Discovery tab.

This will reveal all of the currently visible database services that have been seen on the mirrored traffic connection.

Check Contents

Ask the site representative if the DBN-6300 is used to provide discovery protection against unidentified or rogue databases.

If the DBN-6300 is not used for discovery protection against unidentified or rogue databases, this is not a finding.

Click on the "Database" tab and select the "Database Services" sub-menu. This will reveal all of the currently discovered database services.

If the DBN-6300, which is used to provide protection against unidentified or rogue databases, does not provide a catalog of all visible databases and database services, this is a finding.

When implemented for discovery protection against unidentified or rogue databases, the DBN-6300 must provide a catalog of all visible databases and database services.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments