The antivirus program must be configured to update signature files on a daily basis.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-40175	WN12-00-000110	SV-52133r3_rule		High

Description
Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Using a virus scan program provides the ability to detect malicious code before extensive damage occurs. Updated virus scan data files help protect a system, as constantly changing malware is identified by the antivirus software vendors.

Description

Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Using a virus scan program provides the ability to detect malicious code before extensive damage occurs. Updated virus scan data files help protect a system, as constantly changing malware is identified by the antivirus software vendors.

STIG	Date
Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide	2017-06-09

Details

Check Text ( C-73899r2_chk )
This requirement is NA if McAfee VirusScan Enterprise (VSE) is used. It will be addressed with the corresponding McAfee VSE STIG. Configurations will vary depending on the product. Review the antivirus program signature update configuration. If the antivirus program is not configured to update the signature files on a daily basis, this is a finding. It may not be possible for systems to receive updates on a daily basis due to various factors. If the signature file is more than a week old, this is a finding.

Check Text ( C-73899r2_chk )

This requirement is NA if McAfee VirusScan Enterprise (VSE) is used. It will be addressed with the corresponding McAfee VSE STIG.

Configurations will vary depending on the product.

Review the antivirus program signature update configuration.

If the antivirus program is not configured to update the signature files on a daily basis, this is a finding.

It may not be possible for systems to receive updates on a daily basis due to various factors. If the signature file is more than a week old, this is a finding.

Fix Text (F-80273r1_fix)
Configure the antivirus program to update signature files at least daily. Ensure the updates are occurring on timely basis and are not more than a week old.