The DSN system major software version releases must be tested, certified, and placed on the DoD Approved Product List (APL) prior to installation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-8535	DSN17.06	SV-9032r2_rule		Medium

Description
All DSN system major software releases must be tested on non-production systems and hardware prior to use to determine the effects the new software will have on systems operations and security. DoD policy mandates testing on non-production configurations.

STIG	Date
Defense Switched Network (DSN) STIG	2017-01-19

Details

Check Text ( C-62269r1_chk )
Review site documentation to confirm the DSN local system major software version releases on production systems are on the DoD APL. If the DSN local system major software version releases on production systems are not on the DoD APL, this is a finding.

Fix Text (F-67183r1_fix)
Implement and document the DSN local system with major software version releases listed on the DoD APL. Ensure only VVoIP systems listed on the DoD APL are connected to the DSN. Sponsor the system for DSN APL testing and certification.