III - Administrative Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-NET-000062-ALG-000011
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must be configured to use NIST FIPS-validated cryptography to protect the integrity of remote access sessions.
<VulnDiscussion>Without cryptographic integrity protections, information can be altered by unauthorized users without detection. Remote acce...Rule High Severity -
SRG-NET-000512-ALG-000062
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must enable content protection for each transfer user by encrypting passphrases used for server-side encryption at rest (SSEAR).
<VulnDiscussion>Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...Rule Medium Severity -
SRG-NET-000015-ALG-000016
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must enable password protection of the node database.
<VulnDiscussion>Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...Rule Medium Severity -
SRG-NET-000063-ALG-000012
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must have a master-key set to encrypt the dynamic token encryption key.
<VulnDiscussion>Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...Rule Medium Severity -
SRG-NET-000053-ALG-000001
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must limit the number of concurrent sessions to an organization-defined number for all accounts and/or account types.
<VulnDiscussion>Network element management includes the ability to control the number of users and user sessions that utilize a network eleme...Rule Medium Severity -
SRG-NET-000512-ALG-000062
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must not store group content-protection secrets in plain text.
<VulnDiscussion>Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...Rule Medium Severity -
SRG-NET-000512-ALG-000062
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must not store node content-protection secrets in plain text.
<VulnDiscussion>Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...Rule Medium Severity -
SRG-NET-000512-ALG-000062
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must not store user content-protection secrets in plain text.
<VulnDiscussion>Configuring the network element to implement organization-wide security implementation guides and security checklists ensures...Rule Medium Severity -
SRG-NET-000015-ALG-000016
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must restrict users from using transfer services by default.
<VulnDiscussion>Successful authentication must not automatically give an entity access to an asset or security boundary. The lack of authoriz...Rule Medium Severity -
SRG-NET-000015-ALG-000016
<GroupDescription></GroupDescription>Group -
The IBM Aspera High-Speed Transfer Endpoint must restrict users read, write, and browse permissions by default.
<VulnDiscussion>Successful authentication must not automatically give an entity access to an asset or security boundary. The lack of authoriz...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.