Applications providing IDS and prevention capabilities must prevent non-privileged users from circumventing intrusion detection and prevention capabilities.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32590	SRG-APP-000285-DB-NA	SV-42927r1_rule		Medium

Description
Any application providing intrusion detection and prevention capabilities must be architected and implemented to prevent non-privileged users from circumventing such protections. This can be accomplished through the use of user roles, use of proper systems permissions, auditing, logging, etc. This requirement is specific to applications providing intrusion detection services (IDS). This requirement is NA for databases.

Description

Any application providing intrusion detection and prevention capabilities must be architected and implemented to prevent non-privileged users from circumventing such protections. This can be accomplished through the use of user roles, use of proper systems permissions, auditing, logging, etc. This requirement is specific to applications providing intrusion detection services (IDS). This requirement is NA for databases.

STIG	Date
Database Security Requirements Guide	2012-07-02

Details

Check Text ( C-41029r1_chk )
This check is NA for databases.

Fix Text (F-36504r1_fix)
This fix is NA for databases.