Skip to content
Catalogs
XCCDF
BIND 9.x Security Technical Implementation Guide
SRG-APP-000516-DNS-000109
The host running a BIND 9.x implementation must use a dedicated management interface in order to separate management traffic from DNS specific traffic.
The host running a BIND 9.x implementation must use a dedicated management interface in order to separate management traffic from DNS specific traffic. An XCCDF Rule
The host running a BIND 9.x implementation must use a dedicated management interface in order to separate management traffic from DNS specific traffic.
Medium Severity
<VulnDiscussion>Providing Out-Of-Band (OOB) management is the best first step in any management strategy. No production traffic resides on an out-of-band network. The biggest advantage to implementation of an OOB network is providing support and maintenance to the network that has become degraded or compromised. During an outage or degradation period the in band management link may not be available.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>