The DNS implementation must protect the authenticity of communications sessions for dynamic updates.
An XCCDF Rule
Description
DNS is a fundamental network service that is prone to various attacks, such as cache poisoning and man-in-the middle attacks. If communication sessions are not provided appropriate validity protections, such as the employment of DNSSEC, the authenticity of the data cannot be guaranteed.
- ID
- SV-205183r961110_rule
- Version
- SRG-APP-000219-DNS-000029
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the DNS server to employ mechanisms to protect the authenticity of communications sessions for dynamic updates.