STIGQter: STIG Summary: Trend Micro Deep Security 9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2016:

Trend Deep Security must install security-relevant software updates within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

DISA Rule

SV-80483r1_rule

Vulnerability Number

V-65993

Group Title

SRG-APP-000456

Rule Version

TMDS-00-000325

Severity

CAT II

CCI(s)

• CCI-002605 - The organization installs security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Configure the Trend Deep Security server to install security-relevant software updates within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

Go to Scheduled Tasks under the “Administration” tab and click “New”.
Under “Type”, select “Check for Security Updates.” Choose the” Daily” option, and click “Next”.
Select a start date and time for the daily tasks, then choose “Every Day” and click “Next”.
Select the computers or groups according to the organizations custom policy, and click “Next”.
Enter a unique name for the scheduled task, chose the “Task Enabled” option, and click “Finish”.

Check Contents

Review the Trend Deep Security server configuration to ensure security-relevant software updates are installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

Review the Scheduled Tasks under Administration >> Scheduled Tasks to see if “Daily Check for Security Updates” is present.

If “Daily Check for Security Updates” is not present, this is a finding.

Vulnerability Number

V-65993

Documentable

False

Rule Version

TMDS-00-000325

Severity Override Guidance

Review the Trend Deep Security server configuration to ensure security-relevant software updates are installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

Review the Scheduled Tasks under Administration >> Scheduled Tasks to see if “Daily Check for Security Updates” is present.

If “Daily Check for Security Updates” is not present, this is a finding.

Check Content Reference

M

Target Key

2955

Comments