Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-34752 | SRG-NET-000238-IDPS-00172 | SV-45662r1_rule | Low |
Description |
---|
This control is intended to address the confidentiality and integrity of system information at rest when it is located on a secondary storage device within the IDPS. It is imperative that system data that is generated as well as device configuration data is protected. |
STIG | Date |
---|---|
Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide | 2012-11-19 |
Check Text ( C-43028r1_chk ) |
---|
Inspect the encryption configuration settings. Verify all configuration files, system files, and logs stored on the management console are protected by encryption when at rest. Verify all configuration files, system files, and logs stored on the sensors are protected by encryption when at rest. If files and logs stored on the management console or sensors are not encrypted, this is a finding. |
Fix Text (F-39060r1_fix) |
---|
Enable file encryption for all storage drives in the sensors and management console. |