UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The IDPS must protect the confidentiality and integrity of system information at rest.


Overview

Finding ID Version Rule ID IA Controls Severity
V-34752 SRG-NET-000238-IDPS-00172 SV-45662r1_rule Low
Description
This control is intended to address the confidentiality and integrity of system information at rest when it is located on a secondary storage device within the IDPS. It is imperative that system data that is generated as well as device configuration data is protected.
STIG Date
Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide 2012-11-19

Details

Check Text ( C-43028r1_chk )
Inspect the encryption configuration settings.
Verify all configuration files, system files, and logs stored on the management console are protected by encryption when at rest.
Verify all configuration files, system files, and logs stored on the sensors are protected by encryption when at rest.

If files and logs stored on the management console or sensors are not encrypted, this is a finding.
Fix Text (F-39060r1_fix)
Enable file encryption for all storage drives in the sensors and management console.