UCF STIG Viewer Logo

The Sentry must implement load balancing to limit the effects of known and unknown types of Denial-of-Service (DoS) attacks.


Overview

Finding ID Version Rule ID IA Controls Severity
V-251033 MOIS-AL-000970 SV-251033r802321_rule Low
Description
If the network does not provide safeguards against DoS attacks, network resources will be unavailable to users. Load balancing provides service redundancy; which service redundancy reduces the susceptibility of the ALG to many DoS attacks. The ALG must be configured to prevent or mitigate the impact on network availability and traffic flow of DoS attacks that have occurred or are ongoing. This requirement applies to the network traffic functionality of the device as it pertains to handling network traffic. Some types of attacks may be specialized to certain network technologies, functions, or services. For each technology, known and potential DoS attacks must be identified and solutions for each type implemented.
STIG Date
Ivanti MobileIron Sentry 9.x ALG Security Technical Implementation Guide 2021-09-16

Details

Check Text ( C-54468r802319_chk )
Verify the Sentry is implemented behind a load balancer to limit the effects of known and unknown types of DoS attacks.

If the device is not implemented behind a load balancer to limit the effects of known and unknown types of DoS attacks, this is a finding.
Fix Text (F-54422r802320_fix)
Configure the Sentry to be implemented behind a load balancer to limit the effects of known and unknown types of DoS attacks.