II - Mission Support Classified
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000023-NDM-000205
Group -
Access to the MQ Appliance network element must use two or more authentication servers for the purpose of granting administrative access.
All accounts used for access to the MQ Appliance network device are privileged or system-level accounts. Therefore, if account management functions are not automatically enforced, an attacker could...Rule Medium Severity -
SRG-APP-000025-NDM-000207
Group -
The MQ Appliance network device access must automatically disable accounts after a 35-day period of account inactivity.
Since the accounts in the MQ Appliance network device are privileged or system-level accounts, account management is vital to the security of the MQ Appliance network device. Inactive accounts coul...Rule Medium Severity -
SRG-APP-000065-NDM-000214
Group -
The MQ Appliance network device must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.
By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced.Rule Medium Severity -
SRG-APP-000068-NDM-000215
Group -
The MQ Appliance network device must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
Display of the DoD-approved use notification before granting access to the MQ Appliance network device ensures privacy and security notification verbiage used is consistent with applicable federal ...Rule Medium Severity -
SRG-APP-000079-NDM-000219
Group -
The MQ Appliance network device must notify the administrator of changes to access and/or privilege parameters of the administrator account that occurred since the last logon.
Providing administrators with information regarding security-related changes to their account allows them to determine if any unauthorized activity has occurred. Changes to the account could be an ...Rule Medium Severity -
SRG-APP-000080-NDM-000220
Group -
The MQ Appliance network device must protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation.
This requirement supports non-repudiation of actions taken by an administrator and is required in order to maintain the integrity of the configuration management process. All configuration changes ...Rule Medium Severity -
SRG-APP-000108-NDM-000232
Group -
The MQ Appliance network device must alert the Information System Security Officer (ISSO) and System Administrator (SA) (at a minimum) in the event of an audit processing failure.
It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an ...Rule Medium Severity -
SRG-APP-000125-NDM-000241
Group -
The MQ Appliance network device must back up audit records at least every seven days onto a different system or system component than the system or component being audited.
Protection of log data includes assuring log data is not accidentally lost or deleted. Regularly backing up audit records to a different system or onto separate media than the system being audited ...Rule Medium Severity -
SRG-APP-000148-NDM-000246
Group -
The MQ Appliance network device must uniquely identify and authenticate organizational administrators (or processes acting on behalf of organizational administrators).
To assure accountability and prevent unauthenticated access to the MQ Appliance, organizational administrators must be uniquely identified and authenticated for all network management accesses to p...Rule Medium Severity -
SRG-APP-000148-NDM-000346
Group -
In the event the authentication server is unavailable, the MQ Appliance must provide one local account created for emergency administration use.
Authentication for administrative (privileged level) access to the MQ Appliance is required at all times. An account can be created on the device's local database for use in an emergency, such as w...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.