The IDPS must implement organizationally defined nondiscretionary access control policies over organizationally defined users and resources.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34483	SRG-NET-000017-IDPS-00017	SV-45259r1_rule		Low

Description
When nondiscretionary access control mechanisms are implemented, security labels are assigned to securable objects and users are granted access to the objects only if their level of access matches that required by the security label. Types of nondiscretionary access control include Attribute-Based Access Control, Mandatory Access Control, and Originator Controlled Access Control. Without these security policies, security labels on restricted objects stored on the IDPS may be accessed or changed by unauthorized users.

Description

When nondiscretionary access control mechanisms are implemented, security labels are assigned to securable objects and users are granted access to the objects only if their level of access matches that required by the security label. Types of nondiscretionary access control include Attribute-Based Access Control, Mandatory Access Control, and Originator Controlled Access Control. Without these security policies, security labels on restricted objects stored on the IDPS may be accessed or changed by unauthorized users.

STIG	Date
Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide	2012-11-19

Details

Check Text ( C-42606r1_chk )
Verify the management console is configured to implement access control by assigning rights and permissions to users and resources. If the IDPS is not configured with rights and permissions for users and resources, this is a finding.

Fix Text (F-38655r1_fix)
Configure the IDPS components using nondiscretionary access control as required by organizationally defined policies.