Skip to content

EnterpriseDB Postgres Advanced Server (EPAS) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.

    Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats. A database cluster listens on a single port (usually 5444 for EDB Postgres Advanced Serve...
    Rule Medium Severity
  • SRG-APP-000389-DB-000372

    Group
  • SRG-APP-000416-DB-000380

    Group
  • The DBMS must use NSA-approved cryptography to protect classified information in accordance with the requirements of the data owner.

    Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must implement cryptographic modules adhering to the higher standards ...
    Rule Medium Severity
  • SRG-APP-000427-DB-000385

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules