Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The IDPS must be configured to remove or disable non-essential features, functions, and services of the IDPS application.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-206879 | SRG-NET-000131-IDPS-00097 | SV-206879r382903_rule | Medium |
| Description |
|---|
| An IDPS can be capable of providing a wide variety of capabilities. Not all of these capabilities are necessary. Unnecessary services, functions, and applications increase the attack surface (sum of attack vectors) of a system. These unnecessary capabilities are often overlooked and therefore may remain unsecured. This requirement applies to unnecessary features of the IDPS application itself. |
| STIG | Date |
|---|---|
| Intrusion Detection and Prevention Systems Security Requirements Guide | 2024-05-30 |
Details
| Check Text ( C-7133r298149_chk ) |
|---|
| Verify the IDPS is configured to remove or disable non-essential features, functions, and services of the IDPS application. If the IDPS is not configured to remove or disable non-essential features, functions, and services of the IDPS application, this is a finding. |
| Fix Text (F-7133r298150_fix) |
|---|
| Configure the IDPS to remove or disable non-essential features, functions, and services of the IDPS application. |