Skip to content

The DataPower Gateway providing content filtering must generate a log record when unauthorized network services are detected.

An XCCDF Rule

Description

Unauthorized or unapproved network services lack organizational verification or validation and therefore may be unreliable or serve as malicious rogues for valid services. Examples of network services include service-oriented architectures (SOAs), cloud-based services (e.g., infrastructure as a service, platform as a service, or software as a service), cross-domain, Voice Over Internet Protocol, Instant Messaging, auto-execute, and file sharing.

ID
SV-79775r1_rule
Version
WSDP-AG-000109
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Using the WebGUI, go to Network >> Management >> Web Management Service. Check the "WS-Management endpoint" checkbox. Configure an IP and port for the WS-Management endpoint to connect to.