The DHCP service must not be enabled on an external authoritative name server.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-68621 | IDNS-7X-001000 | SV-83111r1_rule | Medium |
| Description |
|---|
| The site DNS and DHCP architecture must be reviewed to ensure only the appropriate services are enabled on each Grid Member. An external authoritative name server must be configured to allow only authoritative DNS. |
| STIG | Date |
|---|---|
| Infoblox 7.x DNS Security Technical Implementation Guide | 2017-04-05 |
Details
| Check Text ( C-69157r1_chk ) |
|---|
| Navigate to Grid >> Grid Manager >> Services tab. Select "DHCP" and verify only internal Infoblox members have the service enabled. If an external authoritative name server has DHCP enabled this is a finding. |
| Fix Text (F-74739r1_fix) |
|---|
| Navigate to Data Management >> DHCP >> Members/Servers tab. Select the Infoblox member using the check box and click "Stop" in the toolbar to disable the "DHCP" service. |