The IDPS must verify the correct operation of security functions, in accordance with organizationally defined conditions and frequency.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34782	SRG-NET-000267-IDPS-00192	SV-45707r1_rule		Medium

Description

Security functional testing involves testing the system for conformance to the application's security function specifications, as well as, compliance with the underlying security model. The need to verify security functionality applies to all security functions. For those security functions that are not able to execute automated self-tests, the organization either implements compensating security controls or explicitly accepts the risk of not performing the verification as required. System initialization, shutdown, and aborts must be configured to ensure the system remains in a secure state. If tests are not provided and periodically run, the integrity of the system state cannot be verified.

STIG	Date
Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide	2012-11-19

Details

Check Text ( C-43073r1_chk )
Review the IDPS vendor documentation and system configuration to determine if the correct operation of security functions, in accordance with organizationally defined conditions and frequency, is verified. If the correct operation of organizationally defined security functions cannot be verified, this is a finding.

Fix Text (F-39105r1_fix)
Configure the IDPS to verify the correct operation of security functions in accordance with organizationally defined conditions and frequency.