Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The SUSE operating system must implement the Endpoint Security for Linux Threat Prevention tool.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-234801 | SLES-15-010001 | SV-234801r754757_rule | Medium |
| Description |
|---|
| Adding endpoint security tools can provide the capability to automatically take actions in response to malicious behavior, which can provide additional agility in reacting to network threats. These tools also often include a reporting capability to provide network awareness of the system, which may not otherwise exist in an organization's systems management regime. |
| STIG | Date |
|---|---|
| SUSE Linux Enterprise Server 15 Security Technical Implementation Guide | 2021-11-30 |
Details
| Check Text ( C-37989r754755_chk ) |
|---|
| Per OPORD 16-0080, the preferred endpoint security tool is Endpoint Security for Linux (ENSL) in conjunction with SELinux. Procedure: Check that the following package has been installed: # rpm -qa | grep -i mcafeetp If the "mcafeetp" package is not installed, this is a finding. Verify that the daemon is running: # ps -ef | grep -i mfetpd If the daemon is not running, this is a finding. |
| Fix Text (F-37952r754756_fix) |
|---|
| Install and enable the latest McAfee ENSLTP package. |