An approved DoD antivirus program must be installed and used.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
WN12-GE-000002	WN12-GE-000002	WN12-GE-000002_rule		High

Description
Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Utilizing a virus scan program provides the ability to detect malicious code before extensive damage occurs.

STIG	Date
Microsoft Windows Server 2012 Domain Controller Security Technical Implementation Guide	2013-07-25

Details

Check Text ( C-WN12-GE-000002_chk )
If one of the following products is not installed and supported at an appropriate maintenance level, this is a finding: McAfee VirusScan Enterprise Version 8.8 Patch 3 or later Symantec Endpoint Protection (SEP) 12.1 Release Update 2 or later Severity Override: If another recognized antivirus product is installed, this would still be a finding; however, the severity code may be reduced to a CAT III.

Check Text ( C-WN12-GE-000002_chk )

If one of the following products is not installed and supported at an appropriate maintenance level, this is a finding:

McAfee VirusScan Enterprise Version 8.8 Patch 3 or later
Symantec Endpoint Protection (SEP) 12.1 Release Update 2 or later

Severity Override: If another recognized antivirus product is installed, this would still be a finding; however, the severity code may be reduced to a CAT III.

Fix Text (F-WN12-GE-000002_fix)
Install DoD-approved virus scanning software.