An approved, up-to-date, DOD antivirus program must be installed and used.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1074	5.007	SV-32244r2_rule		High

Description
Antivirus programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Utilizing an antivirus program provides the ability to detect malicious code before extensive damage occurs. Updated virus scan data files help to protect a system, since new malware are identified by the software vendors on a continual basis.

Description

Antivirus programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Utilizing an antivirus program provides the ability to detect malicious code before extensive damage occurs. Updated virus scan data files help to protect a system, since new malware are identified by the software vendors on a continual basis.

STIG	Date
Windows Server 2008 R2 Member Server Security Technical Implementation Guide	2016-06-08

Details

Check Text ( C-61991r2_chk )
If V-19910 from an antivirus STIG has been applied to the system, the signature verification portion of this requirement is NA. Verify a supported DoD antivirus product has been installed on the system. If McAfee VirusScan Enterprise 8.8 or later is not installed on the system, this is a finding. And If a product other than McAfee VirusScan Enterprise is used and V-19910 from an antivirus STIG has not been applied to the system, verify the date of the antivirus signature. If the antivirus program signature has not been updated within the past 7 days, this is a finding. The version numbers and the date of the signature can generally be checked by starting the antivirus program. The information may appear in the antivirus window or be available in the Help >> About window. The location varies from product to product.

Check Text ( C-61991r2_chk )

If V-19910 from an antivirus STIG has been applied to the system, the signature verification portion of this requirement is NA.

Verify a supported DoD antivirus product has been installed on the system.

If McAfee VirusScan Enterprise 8.8 or later is not installed on the system, this is a finding.

And

If a product other than McAfee VirusScan Enterprise is used and V-19910 from an antivirus STIG has not been applied to the system, verify the date of the antivirus signature.

If the antivirus program signature has not been updated within the past 7 days, this is a finding.

The version numbers and the date of the signature can generally be checked by starting the antivirus program. The information may appear in the antivirus window or be available in the Help >> About window. The location varies from product to product.

Fix Text (F-66887r1_fix)
Install McAfee VirusScan Enterprise 8.8 or later on the system. Update the signature file at least every 7 days.