II - Mission Support Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-NET-000333-ALG-000049
<GroupDescription></GroupDescription>Group -
The IBM Aspera Platform must be configured to support centralized management and configuration.
<VulnDiscussion>Without the ability to centrally manage the content captured in the audit records, identification, troubleshooting, and corre...Rule Medium Severity -
SRG-NET-000131-ALG-000085
<GroupDescription></GroupDescription>Group -
The IBM Aspera Platform must not have unnecessary services and functions enabled.
<VulnDiscussion>Information systems are capable of providing a wide variety of functions (capabilities or processes) and services. Some of th...Rule Medium Severity -
SRG-NET-000339-ALG-000090
<GroupDescription></GroupDescription>Group -
IBM Aspera Console must implement multifactor authentication for remote access to non-privileged accounts such that one of the factors is provided by a device separate from the system gaining access.
<VulnDiscussion>For remote access to non-privileged accounts, the purpose of requiring a device that is separate from the information system ...Rule Medium Severity -
SRG-NET-000098-ALG-000056
<GroupDescription></GroupDescription>Group -
The IBM Aspera Console must protect audit information from unauthorized read access.
<VulnDiscussion>Auditing and logging are key components of any security architecture. Logging the actions of specific events provides a means...Rule Medium Severity -
SRG-NET-000101-ALG-000059
<GroupDescription></GroupDescription>Group -
The IBM Aspera Console must protect audit tools from unauthorized access.
<VulnDiscussion>Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, pro...Rule Medium Severity -
SRG-NET-000138-ALG-000063
<GroupDescription></GroupDescription>Group -
IBM Aspera Console must be configured with a preestablished trust relationship and mechanisms with appropriate authorities (e.g., Active Directory or AAA server) which validate user account access authorizations and privileges.
<VulnDiscussion>User account and privilege validation must be centralized in order to prevent unauthorized access using changed or revoked pr...Rule Medium Severity -
SRG-NET-000062-ALG-000011
<GroupDescription></GroupDescription>Group -
The IBM Aspera Console feature must be configured to use encryption services that implement NIST FIPS-validated cryptography to protect the confidentiality of remote access sessions.
<VulnDiscussion>Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote...Rule High Severity -
SRG-NET-000213-ALG-000107
<GroupDescription></GroupDescription>Group -
IBM Aspera Console interactive session must be terminated after 10 minutes of inactivity for non-privileged and privileged sessions.
<VulnDiscussion>Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take c...Rule Medium Severity -
SRG-NET-000512-ALG-000062
<GroupDescription></GroupDescription>Group -
IBM Aspera Console must enforce password complexity by requiring at least fifteen characters, with at least one upper case letter, one lower case letter, one number, and one symbol.
<VulnDiscussion>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, ...Rule Medium Severity -
SRG-NET-000512-ALG-000062
<GroupDescription></GroupDescription>Group -
IBM Aspera Console must lock accounts after three unsuccessful login attempts within a 15-minute timeframe.
<VulnDiscussion>By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.