Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-253513 | DCAV-00-000009 | SV-253513r836514_rule | Medium |
Description |
---|
Remote access (e.g., Remote Desktop Protocol [RDP]) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. |
STIG | Date |
---|---|
AvePoint DocAve 6 Security Technical Implementation Guide | 2022-08-24 |
Check Text ( C-56965r836512_chk ) |
---|
DocAve supports integration with Active Directory (AD) for automated account management. Check the DocAve configuration to ensure AD Integration is enabled. - Log on to DocAve with admin account. - On the Control Panel page, in the Authentication Manager section, click "Authentication Manager". - Navigate to AD Integration. - Verify that the AD Integration option is enabled. If the AD Integration option is not enabled, this is a finding. |
Fix Text (F-56916r836513_fix) |
---|
Configure the DocAve configuration to ensure AD Integration is enabled. - Log on to DocAve with admin account. - On the Control Panel page, in the Authentication Manager section, click "Authentication Manager". - Navigate to AD Integration. - Set the Action of AD Integration to Enable. - Save settings. Add AD user or group to DocAve by Account Manager, realize automated mechanisms through AD account management functions. |