The operating system must have malicious code protection mechanisms at system entry and exit points to detect and eradicate malicious code transported by electronic mail, electronic mail attachments, web accesses, removable media, or other common means.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-47955	SOL-11.1-090140	SV-60827r1_rule		High

Description
This requirement applies to email servers only. In order to minimize potential negative impact to the organization caused by malicious code, it is imperative that malicious code is identified and eradicated prior to entering protected enclaves via operating system entry and exit points. The requirement states that AV and malware protection applications must be used at entry and exit points. For the operating system, this means an anti-virus application must be installed on machines that are the entry and exit points.

Description

This requirement applies to email servers only. In order to minimize potential negative impact to the organization caused by malicious code, it is imperative that malicious code is identified and eradicated prior to entering protected enclaves via operating system entry and exit points. The requirement states that AV and malware protection applications must be used at entry and exit points. For the operating system, this means an anti-virus application must be installed on machines that are the entry and exit points.

STIG	Date
Solaris 11 SPARC Security Technical Implementation Guide	2017-03-02

Details

Check Text ( C-50391r1_chk )
The operator will ensure that DoD approved anti-virus software is installed, operating, and updated at least weekly. Virus definitions will be updated regularly. The software will be maintained per vendor documentation. If the operator is unable to provide a documented configuration for an installed anti-virus software system or if the anti-virus software is not properly configured, maintained, or used, this is a finding.

Check Text ( C-50391r1_chk )

The operator will ensure that DoD approved anti-virus software is installed, operating, and updated at least weekly. Virus definitions will be updated regularly. The software will be maintained per vendor documentation.

If the operator is unable to provide a documented configuration for an installed anti-virus software system or if the anti-virus software is not properly configured, maintained, or used, this is a finding.

Fix Text (F-51567r1_fix)
The operator will ensure that DoD approved anti-virus software is installed, operating, and updated at least weekly. Virus definitions will be updated regularly.