Skip to content
ATO Pathways
  Log In

I - Mission Critical Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000138-ALG-000063

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM Aspera Shares must be configured to uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

    &lt;VulnDiscussion&gt;To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to pre...
    Rule Medium Severity
    Show

  • SRG-NET-000063-ALG-000012

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM Aspera Shares feature must be configured to use NIST FIPS-validated cryptography to protect the integrity of file transfers.

    &lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection. Remote acce...
    Rule High Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM Aspera Shares must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.

    &lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection. Remote acce...
    Rule Medium Severity
    Show

  • SRG-NET-000098-ALG-000056

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM Aspera Shares must protect audit information from unauthorized deletion.

    &lt;VulnDiscussion&gt;If audit data were to become compromised, then forensic analysis and discovery of the true source of potentially malicious sy...
    Rule Medium Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera Shares private/secret cryptographic keys file must be group-owned by nobody to prevent unauthorized read access.

    &lt;VulnDiscussion&gt;Private key data is used to prove that the entity presenting a public key certificate is the certificate's rightful owner. Co...
    Rule Medium Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera Shares private/secret cryptographic keys file must be owned by nobody to prevent unauthorized read access.

    &lt;VulnDiscussion&gt;Private key data is used to prove that the entity presenting a public key certificate is the certificate's rightful owner. Co...
    Rule Medium Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera Shares private/secret cryptographic keys file must have a mode of 0400 or less permissive to prevent unauthorized read access.

    &lt;VulnDiscussion&gt;Private key data is used to prove that the entity presenting a public key certificate is the certificate's rightful owner. Co...
    Rule Medium Severity
    Show

  • SRG-NET-000062-ALG-000150

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must be configured to comply with the required TLS settings in NIST SP 800-52.

    &lt;VulnDiscussion&gt;SP 800-52 provides guidance on using the most secure version and configuration of the TLS/SSL protocol. Using older unauthori...
    Rule High Severity
    Show

  • SRG-NET-000132-ALG-000087

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

    &lt;VulnDiscussion&gt;In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e....
    Rule Medium Severity
    Show

  • SRG-NET-000230-ALG-000113

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must be configured to protect the authenticity of communications sessions.

    &lt;VulnDiscussion&gt;Authenticity protection provides protection against man-in-the-middle attacks/session hijacking and the insertion of false in...
    Rule Medium Severity
    Show

  • SRG-NET-000062-ALG-000011

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must be configured to use NIST FIPS-validated cryptography to protect the integrity of remote access sessions.

    &lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection. Remote acce...
    Rule High Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must enable content protection for each transfer user by encrypting passphrases used for server-side encryption at rest (SSEAR).

    &lt;VulnDiscussion&gt;Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...
    Rule Medium Severity
    Show

  • SRG-NET-000015-ALG-000016

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must enable password protection of the node database.

    &lt;VulnDiscussion&gt;Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...
    Rule Medium Severity
    Show

  • SRG-NET-000063-ALG-000012

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must have a master-key set to encrypt the dynamic token encryption key.

    &lt;VulnDiscussion&gt;Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...
    Rule Medium Severity
    Show

  • SRG-NET-000053-ALG-000001

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must limit the number of concurrent sessions to an organization-defined number for all accounts and/or account types.

    &lt;VulnDiscussion&gt;Network element management includes the ability to control the number of users and user sessions that utilize a network eleme...
    Rule Medium Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must not store group content-protection secrets in plain text.

    &lt;VulnDiscussion&gt;Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...
    Rule Medium Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must not store node content-protection secrets in plain text.

    &lt;VulnDiscussion&gt;Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...
    Rule Medium Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must not store user content-protection secrets in plain text.

    &lt;VulnDiscussion&gt;Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...
    Rule Medium Severity
    Show

  • SRG-NET-000015-ALG-000016

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must restrict users from using transfer services by default.

    &lt;VulnDiscussion&gt;Successful authentication must not automatically give an entity access to an asset or security boundary. The lack of authoriz...
    Rule Medium Severity
    Show

  • SRG-NET-000015-ALG-000016

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must restrict users read, write, and browse permissions by default.

    &lt;VulnDiscussion&gt;Successful authentication must not automatically give an entity access to an asset or security boundary. The lack of authoriz...
    Rule Medium Severity
    Show

  • SRG-NET-000344-ALG-000098

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Endpoint must prohibit the use of cached authenticators after an organization-defined time period.

    &lt;VulnDiscussion&gt;If the cached authenticator information is out of date, the validity of the authentication information may be questionable. ...
    Rule Medium Severity
    Show

  • SRG-NET-000062-ALG-000150

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Server must be configured to comply with the required TLS settings in NIST SP 800-52.

    &lt;VulnDiscussion&gt;SP 800-52 provides guidance on using the most secure version and configuration of the TLS/SSL protocol. Using older unauthori...
    Rule High Severity
    Show

  • SRG-NET-000132-ALG-000087

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Server must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

    &lt;VulnDiscussion&gt;In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e....
    Rule Medium Severity
    Show

  • SRG-NET-000230-ALG-000113

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Server must be configured to protect the authenticity of communications sessions.

    &lt;VulnDiscussion&gt;Authenticity protection provides protection against man-in-the-middle attacks/session hijacking and the insertion of false in...
    Rule Medium Severity
    Show

  • SRG-NET-000062-ALG-000011

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera High-Speed Transfer Server must be configured to use NIST FIPS-validated cryptography to protect the integrity of remote access sessions.

    &lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection. Remote acce...
    Rule High Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules