Infoblox 7.x DNS Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The IP address for hidden master authoritative name servers must not appear in the name servers set in the zone database.
A hidden master authoritative server is an authoritative DNS server whose IP address does not appear in the name server set for a zone. All of the name servers that do appear in the zone database a...Rule Medium Severity -
SRG-APP-000516-DNS-000109
Group -
SRG-APP-000516-DNS-000110
Group -
Infoblox Grid configuration must be backed up on a regular basis.
The Infoblox Grid Master is the central point of management within an Infoblox Grid. The Grid Master retains a full copy of the configuration used for the entire Grid. In the event of system failur...Rule Medium Severity -
SRG-APP-000516-DNS-000500
Group -
SRG-APP-000516-DNS-000114
Group -
CNAME records must not point to a zone with lesser security for more than six months.
The use of CNAME records for exercises, tests, or zone-spanning aliases should be temporary (e.g., to facilitate a migration). When a host name is an alias for a record in another zone, an adversar...Rule Medium Severity -
SRG-APP-000516-DNS-000500
Group -
The Infoblox system must be configured in accordance with the security configuration settings based on DoD security configuration or implementation guidance, including STIGs, NSA configuration guides, CTOs, and DTMs.
Configuration settings are the set of parameters that can be changed that affect the security posture and/or functionality of the system. Security-related parameters are those parameters impacting ...Rule Medium Severity -
SRG-APP-000516-DNS-000500
Group -
The Infoblox system must be configured to display the appropriate security classification information.
Configuration of the informational banner displays the security classification of the Infoblox system using both color and text. Text may be added for additional security markings.Rule Low Severity -
SRG-APP-000516-DNS-000500
Group -
The Infoblox system must be configured with the approved DoD notice and consent banner.
Configuration of the DoD notice and consent banner requires all administrators to acknowledge the current DoD notice and consent by clicking an "Accept" button.Rule Low Severity -
SRG-APP-000516-DNS-000500
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.