When implemented for discovery protection against unidentified or rogue databases, the DBN-6300 must provide a catalog of all visible databases and database services.
An XCCDF Rule
Description
If the DBN-6300 is installed incorrectly in the site's network architecture, vulnerable or unknown databases may not be detected and consequently may remain vulnerable and unprotected. For proper functionality of the DBN-6300, it is necessary to examine the discovered databases to see that an expected wide variety and number of them are covered. If the DBN-6300 is not able to see and detect database services, it will not be able to monitor the databases against threats.
- ID
- SV-79549r1_rule
- Version
- DBNW-IP-000061
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the system to view databases and database services.
Click on the Database >> Service Discovery tab.
This will reveal all of the currently visible database services that have been seen on the mirrored traffic connection.