The macOS system must utilize an Endpoint Security Solution (ESS) and implement all DoD required modules.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-225129	AOSX-15-000015	SV-225129r802343_rule		Medium

Description
The macOS system must employ automated mechanisms to determine the state of system components. The DoD requires the installation and use of an approved ESS to be implemented on the operating system. For additional information, reference all applicable ESS OPORDs and FRAGOs on SIPRNet.

STIG	Date
Apple OS X 10.15 (Catalina) Security Technical Implementation Guide	2022-06-06

Details

Check Text ( C-26828r802341_chk )
Verify that there is an approved ESS installed on the system. If there is not an approved ESS installed, this is a finding. Verify that all installed components of the ESS are at the DoD-approved minimal version. If the installed components are not at the DoD-approved minimal versions, this is a finding.

Fix Text (F-26816r802342_fix)
Install an approved ESS onto the system and ensure that all components are at least updated to their DoD-approved minimal versions.