Capacity
CCI-001179
Provides the means to indicate the security status of child zones, when operating as part of a distributed, hierarchical namespace.
2
Rule
Severity: Medium
A BIND 9.x server implementation must provide the means to indicate the security status of child zones.
2
Rule
Severity: Medium
The BIND 9.x server validity period for the RRSIGs covering the DS RR for zones delegated children must be no less than two days and no more than one week.
3
Rule
Severity: Medium
A DNS server implementation must provide the means to indicate the security status of child zones.
3
Rule
Severity: Medium
The validity period for the RRSIGs covering the DS RR for a zones delegated children must be no less than two days and no more than one week.
1
Rule
Severity: Medium
The Infoblox DNS server implementation must provide the means to indicate the security status of child zones.
1
Rule
Severity: Medium
The validity period for the Resource Record Signatures (RRSIGs) covering the Delegation Signer (DS) RR for a zone's delegated children must be no less than two days and no more than one week.
1
Rule
Severity: Medium
The Key Signing Key (KSK) rollover interval must be configured to no less than one year.
1
Rule
Severity: Medium
The Windows 2012 DNS Server must be configured with the DS RR carrying the signature for the RR that contains the public key of the child zone.
2
Rule
Severity: Medium
The validity period for the Resource Record Signatures (RRSIGs) covering the Delegation Signer (DS) Resource Record (RR) for a zone's delegated children must be no less than two days and no more than one week.
2
Rule
Severity: Medium
The Windows DNS Server must be configured with the Delegation Signer (DS) Resource Records (RR) carrying the signature for the RR that contains the public key of the child zone.
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules