IBM MQ Appliance V9.0 AS Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000514-AS-000137
Group -
The MQ Appliance messaging server must use DoD- or CNSS-approved PKI Class 3 or Class 4 certificates.
Class 3 PKI certificates are used for servers and software signing rather than for identifying individuals. Class 4 certificates are used for business-to-business transactions. Utilizing unapproved...Rule Medium Severity -
SRG-APP-000435-AS-000069
Group -
SRG-APP-000014-AS-000009
Group -
The MQ Appliance messaging server must use encryption strength in accordance with the categorization of the management data during remote access management sessions.
Remote management access is accomplished by leveraging common communication protocols and establishing a remote connection to the messaging server via a network for the purposes of managing the mes...Rule Medium Severity -
SRG-APP-000515-AS-000203
Group -
SRG-APP-000440-AS-000167
Group -
The MQ Appliance messaging server must employ approved cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.
Preventing the disclosure or modification of transmitted information requires that messaging servers take measures to employ approved cryptography in order to protect the information during transmi...Rule Medium Severity -
SRG-APP-000439-AS-000274
Group -
The MQ Appliance messaging server must remove all export ciphers to protect the confidentiality and integrity of transmitted information.
During the initial setup of a Transport Layer Security (TLS) connection to the messaging server, the client sends a list of supported cipher suites in order of preference. The messaging server wil...Rule Medium Severity -
SRG-APP-000439-AS-000155
Group -
The MQ Appliance messaging server must protect the confidentiality and integrity of transmitted information through the use of an approved TLS version.
Preventing the disclosure of transmitted information requires that the messaging server take measures to employ some form of cryptographic mechanism in order to protect the information during trans...Rule Medium Severity -
SRG-APP-000095-AS-000056
Group -
SRG-APP-000266-AS-000168
Group -
The MQ Appliance messaging server must identify potentially security-relevant error conditions.
The structure and content of error messages need to be carefully considered by the organization and development team. Any application providing too much information in error logs and in administrat...Rule Medium Severity -
SRG-APP-000108-AS-000067
Group -
The MQ Appliance messaging server must alert the SA and ISSO, at a minimum, in the event of a log processing failure.
Logs are essential to monitor the health of the system, investigate changes that occurred to the system, or investigate a security incident. When log processing fails, the events during the failure...Rule Medium Severity -
SRG-APP-000435-AS-000163
Group -
SRG-APP-000404-AS-000249
Group -
SRG-APP-000181-AS-000255
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.