The network element must not allow users to introduce removable media into the information system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34219	SRG-NET-000254-DNS-NA	SV-44695r1_rule		Medium

Description
Malicious code includes viruses, worms, Trojan horses, and spyware. The code provides the ability for a malicious user to read from and write to files and folders on a computer's hard drive. They also have the ability to run and attach programs, which provides a high risk potential for the distribution of malicious mobile code. Malicious code can be transported by electronic mail, mail attachments, web accesses, and removable media. Media protection is not a function of DNS.

Description

Malicious code includes viruses, worms, Trojan horses, and spyware. The code provides the ability for a malicious user to read from and write to files and folders on a computer's hard drive. They also have the ability to run and attach programs, which provides a high risk potential for the distribution of malicious mobile code. Malicious code can be transported by electronic mail, mail attachments, web accesses, and removable media. Media protection is not a function of DNS.

STIG	Date
Domain Name System (DNS) Security Requirements Guide	2012-10-24

Details

Check Text ( C-42200r1_chk )
This is not a function of DNS.

Fix Text (F-38149r1_fix)
This requirement is NA for DNS. No fix required.