The IDPS management console must be logically installed on the management network.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34562	SRG-NET-999999-IDPS-00238	SV-45411r1_rule		Medium

Description
The central management console (sometimes known as the management server or the database server) provides a central location to store, view, analyze, and produce detailed reports on alerts. This IDPS component must be installed on a protected network segment to limit access to normal user traffic.

STIG	Date
Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide	2012-11-19

Details

Check Text ( C-42759r2_chk )
Verify the IP address of the IDPS management console is on the management subnet. If the IDPS central management console is not installed on the management network, this is a finding.

Fix Text (F-38807r2_fix)
Move the IDPS central management console to the management network.