For those instances where the organization requires encrypted traffic to be visible to information system monitoring tools, the application transmitting the encrypted traffic must make provisions to allow that traffic to be visible to specific system monitoring tools.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32587	SRG-APP-000282-DB-NA	SV-42924r1_rule		Medium

Description
There is a recognized need to balance encrypting traffic versus the need to have insight into the traffic from a monitoring perspective. For some organizations, the need to ensure the confidentiality of traffic is paramount; for others, the mission-assurance concerns are greater. This requirement is specific to network applications responsible for encrypting and decrypting network traffic. This requirement is NA for databases.

Description

There is a recognized need to balance encrypting traffic versus the need to have insight into the traffic from a monitoring perspective. For some organizations, the need to ensure the confidentiality of traffic is paramount; for others, the mission-assurance concerns are greater. This requirement is specific to network applications responsible for encrypting and decrypting network traffic. This requirement is NA for databases.

STIG	Date
Database Security Requirements Guide	2012-07-02

Details

Check Text ( C-41026r1_chk )
This check is NA for databases.

Fix Text (F-36501r1_fix)
This fix is NA for databases.