STIGQter: STIG Summary: Trend Micro Deep Security 9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2016:

Trend Deep Security must notify ISSO and ISSM of failed security verification tests.

DISA Rule

SV-80429r1_rule

Vulnerability Number

V-65939

Group Title

SRG-APP-000275

Rule Version

TMDS-00-000200

Severity

CAT II

CCI(s)

• CCI-001294 - The information system notifies organization-defined personnel or roles of failed security verification tests.

Weight

10

Fix Recommendation

Configure the Trend Deep Security server to notify ISSO and ISSM of failed security verification tests.

Go to Administration >> User Management >> Users

Select the account associated with the ISSM or ISSO and double-click.

Under the “Contact Information” tab enter the users Contact Information.

Next, select the checkbox for “Receive Alert Emails”.

Check Contents

Review the Trend Deep Security server configuration to ensure the ISSO and ISSM are notified of failed security verification tests.

From Administration >> User Management >> Users

Select the account associated with the ISSM or ISSO and double-click.

Under the Contact Information tab, verify the Contact Information is associated with account is complete and accurate.

If the account information is missing or incorrect, this is a finding.

Next, verify the "Receive Alert Email" check box is selected.

If the "Receive Alert Email" checkbox is not selected, this is finding.

Vulnerability Number

V-65939

Documentable

False

Rule Version

TMDS-00-000200

Severity Override Guidance

Review the Trend Deep Security server configuration to ensure the ISSO and ISSM are notified of failed security verification tests.

From Administration >> User Management >> Users

Select the account associated with the ISSM or ISSO and double-click.

Under the Contact Information tab, verify the Contact Information is associated with account is complete and accurate.

If the account information is missing or incorrect, this is a finding.

Next, verify the "Receive Alert Email" check box is selected.

If the "Receive Alert Email" checkbox is not selected, this is finding.

Check Content Reference

M

Target Key

2955

Comments