DB2 must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.
An XCCDF Rule
Description
<VulnDiscussion>Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-213726r879756_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Use the following commands to set the protocol and ports as per PPSM guidance:
$db2 update dbm cfg using svcename [service_name | port_number]
$db2 update dbm cfg using ssl_svcename [ssl_service_name | port_number]