Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-32557 | SRG-APP-000253-DB-NA | SV-42894r1_rule | Medium |
Description |
---|
Automated mechanisms used to enforce protocol formats include deep packet inspection firewalls and XML gateways. These devices verify adherence to the protocol specification (e.g., IEEE) at the application layer and serve to identify significant vulnerabilities that cannot be detected by devices operating at the network or transport layer. It is impractical to expect protocol format inspection to be conducted manually. This requirement applies to applications designed to enforce protocol formats and is NA for databases. |
STIG | Date |
---|---|
Database Security Requirements Guide | 2012-07-02 |
Check Text ( C-40996r1_chk ) |
---|
This check is NA for databases. |
Fix Text (F-36472r1_fix) |
---|
This fix is NA for databases. |