The network element must be configured to automatically disable the device if any of the organization defined list of security violations are detected.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-33930 | SRG-NET-000037-DNS-NA | SV-44383r1_rule | Medium |
| Description |
|---|
| To reduce or eliminate the risk of the network or the network element itself to be compromised, the device must be configured to disable itself depending on the violation or when it is not able to contain or thwart an attack. Disabling devices is not a function of DNS. |
| STIG | Date |
|---|---|
| Domain Name System (DNS) Security Requirements Guide | 2012-10-24 |
Details
| Check Text ( C-41939r1_chk ) |
|---|
| This is not a function of DNS. |
| Fix Text (F-37843r1_fix) |
|---|
| This requirement is NA for DNS. No fix required. |