The IDPS must not allow users to introduce removable media into the information system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000254-IDPS-000225	SRG-NET-000254-IDPS-000225	SRG-NET-000254-IDPS-000225_rule		Medium

Description
Malicious code includes viruses, worms, Trojan horses, and spyware. The code provides the ability for a malicious user to read from and write to files and folders on a computer's hard drive. They also have the ability to run and attach programs, which provides a high risk potential for the distribution of malicious mobile code. Malicious code can be transported by electronic mail, mail attachments, web accesses, and removable media. This control pertains to anti-virus products which are out of scope.

Description

Malicious code includes viruses, worms, Trojan horses, and spyware. The code provides the ability for a malicious user to read from and write to files and folders on a computer's hard drive. They also have the ability to run and attach programs, which provides a high risk potential for the distribution of malicious mobile code. Malicious code can be transported by electronic mail, mail attachments, web accesses, and removable media. This control pertains to anti-virus products which are out of scope.

STIG	Date
IDPS Security Requirements Guide (SRG)	2012-03-08

Details

Check Text ( C-43389_chk )
This requirement does not apply to IDPS.

Fix Text (F-43389_fix)
Not applicable for IDPS. No fix required.