Skip to content

IBM MQ Appliance V9.0 AS Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The MQ Appliance messaging server must produce log records containing information to establish what type of events occurred.

    <VulnDiscussion>Information system logging capability is critical for accurate forensic analysis. Without being able to establish what type o...
    Rule Medium Severity
  • SRG-APP-000266-AS-000168

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance messaging server must identify potentially security-relevant error conditions.

    &lt;VulnDiscussion&gt;The structure and content of error messages need to be carefully considered by the organization and development team. Any app...
    Rule Medium Severity
  • SRG-APP-000108-AS-000067

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance messaging server must alert the SA and ISSO, at a minimum, in the event of a log processing failure.

    &lt;VulnDiscussion&gt;Logs are essential to monitor the health of the system, investigate changes that occurred to the system, or investigate a sec...
    Rule Medium Severity
  • SRG-APP-000435-AS-000163

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance messaging server must protect against or limit the effects of all types of Denial of Service (DoS) attacks by employing operationally-defined security safeguards.

    &lt;VulnDiscussion&gt;DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot ac...
    Rule Medium Severity
  • SRG-APP-000404-AS-000249

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance messaging server must accept FICAM-approved third-party credentials.

    &lt;VulnDiscussion&gt;Access may be denied to legitimate users if FICAM-approved third-party credentials are not accepted. This requirement typica...
    Rule Low Severity
  • SRG-APP-000181-AS-000255

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules