Skip to content
ATO Pathways
  Log In

MarkLogic Server v9 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000357-DB-000316

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

    &lt;VulnDiscussion&gt;To ensure sufficient storage capacity for the audit logs, the DBMS must be able to allocate audit record storage capacity. Al...
    Rule Medium Severity
    Show

  • SRG-APP-000359-DB-000319

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

    &lt;VulnDiscussion&gt;Organizations are required to use a central log management system, so, under normal conditions, the audit space allocated to ...
    Rule Medium Severity
    Show

  • SRG-APP-000360-DB-000320

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must provide an immediate real-time alert to appropriate support staff of all audit failures.

    &lt;VulnDiscussion&gt;It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required....
    Rule Medium Severity
    Show

  • SRG-APP-000381-DB-000361

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must produce audit records of its enforcement of access restrictions associated with changes to the configuration of the DBMS or database(s).

    &lt;VulnDiscussion&gt;Without auditing the enforcement of access restrictions against changes to configuration, it would be difficult to identify a...
    Rule Medium Severity
    Show

  • SRG-APP-000383-DB-000364

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accordance with Ports, Protocols, and Services Management (PPSM) guidance.

    &lt;VulnDiscussion&gt;Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats.&lt;/VulnDiscussio...
    Rule Medium Severity
    Show

  • SRG-APP-000400-DB-000367

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must prohibit the use of cached authenticators after an organization-defined time period.

    &lt;VulnDiscussion&gt;If cached authentication information is out-of-date, the validity of the authentication information may be questionable.&lt;/...
    Rule Medium Severity
    Show

  • SRG-APP-000427-DB-000385

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must only accept end-entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

    &lt;VulnDiscussion&gt;Only DoD-approved external PKIs have been evaluated to ensure that they have security controls and identity vetting procedure...
    Rule Medium Severity
    Show

  • SRG-APP-000428-DB-000386

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.

    &lt;VulnDiscussion&gt;DBMSs handling data requiring data-at-rest protections must employ cryptographic mechanisms to prevent unauthorized disclosur...
    Rule High Severity
    Show

  • SRG-APP-000429-DB-000387

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000504-DB-000355

    <GroupDescription></GroupDescription>
    Group
    Show

  • MarkLogic Server must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.

    &lt;VulnDiscussion&gt;DBMSs handling data requiring data-at-rest protections must employ cryptographic mechanisms to prevent unauthorized disclosur...
    Rule High Severity
    Show

  • SRG-APP-000456-DB-000390

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules