The network element must prevent the automatic execution of mobile code in organization defined software applications and requires organization defined actions prior to executing the code.

The network element must prevent the automatic execution of mobile code in organization defined software applications and requires organization defined actions prior to executing the code.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34256	SRG-NET-000290-DNS-NA	SV-44735r1_rule		Medium

Description
Decisions regarding the employment of mobile code within network elements are based on the potential for the code to cause damage to the system if used maliciously. Mobile code technologies include, Java, JavaScript, ActiveX, PDF, Postscript, Shockwave movies, Flash animations, and VBScript. Prevention of mobile code execution is not a function of DNS.

STIG	Date
Domain Name System (DNS) Security Requirements Guide	2012-10-24

Details

Check Text ( C-42240r1_chk )
This is not a function of DNS.

Fix Text (F-38187r1_fix)
This requirement is NA for DNS. No fix required.