The network element must provide the means to indicate the security status of child subspaces and (if the child supports secure resolution services) enable verification of a chain of trust among parent and child domains.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34652	SRG-NET-000301-IDPS-NA	SV-45527r1_rule		Low

Description

A recursive resolving or caching domain name system (DNS) server is an example of an information system that provides name/address resolution service for local clients. Authoritative DNS servers are examples of authoritative sources. Network elements that use technologies other than the DNS to map between host/service names and network addresses provide other means to enable clients to verify the authenticity and integrity of response data. This requirement is a function of the DNS and is not applicable to the IDPS.

STIG	Date
Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide	2012-11-19

Details

Check Text ( C-42876r1_chk )
This requirement is NA for IDPS. No fix required.

Fix Text (F-38924r1_fix)
This requirement is NA for IDPS. No fix required.