Skip to content

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • Redis Enterprise DBMS must generate audit records for DoD-defined auditable events within all DBMS/database components.

    Redis Enterprise does not generate all the DoD-required audit records. This could lead to incomplete information as follows: - Without an audit trail, unauthorized access to protected data and att...
    Rule Medium Severity
  • SRG-APP-000164-DB-000401

    Group
  • If DBMS authentication using passwords is employed, Redis Enterprise DBMS must enforce the DOD standards for password complexity and lifetime.

    OS/enterprise authentication and identification must be used (SRG-APP-000023-DB-000001). Native DBMS authentication may be used only when circumstances make it unavoidable and must be documented an...
    Rule Medium Severity
  • SRG-APP-000456-DB-000400

    Group
  • Redis Enterprise products must be a version supported by the vendor.

    Unsupported commercial and database systems should not be used because fixes to newly identified bugs will not be implemented by the vendor. The lack of support can result in potential vulnerabilit...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules