DocAve must provide automated mechanisms for supporting account management functions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-253513	DCAV-00-000009	SV-253513r836514_rule		Medium

Description
Remote access (e.g., Remote Desktop Protocol [RDP]) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.

STIG	Date
AvePoint DocAve 6 Security Technical Implementation Guide	2022-08-24

Details

Check Text ( C-56965r836512_chk )

DocAve supports integration with Active Directory (AD) for automated account management. Check the DocAve configuration to ensure AD Integration is enabled. - Log on to DocAve with admin account. - On the Control Panel page, in the Authentication Manager section, click "Authentication Manager". - Navigate to AD Integration. - Verify that the AD Integration option is enabled. If the AD Integration option is not enabled, this is a finding.

Fix Text (F-56916r836513_fix)

Configure the DocAve configuration to ensure AD Integration is enabled. - Log on to DocAve with admin account. - On the Control Panel page, in the Authentication Manager section, click "Authentication Manager". - Navigate to AD Integration. - Set the Action of AD Integration to Enable. - Save settings. Add AD user or group to DocAve by Account Manager, realize automated mechanisms through AD account management functions.