Skip to content
Log In

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000295-NDM-000279

    Group
    Show

  • The DataPower Gateway must automatically terminate a network administrator session after organization-defined conditions or trigger events requiring session disconnect.

    Automatic session termination addresses the termination of administrator-initiated logical sessions in contrast to the termination of network connections that are associated with communications ses...
    Rule Medium Severity
    Show

  • SRG-APP-000296-NDM-000280

    Group
    Show

  • The DataPower Gateway must provide a logout capability for administrator-initiated communication sessions.

    If an administrator cannot explicitly end a device management session, the session may remain open and be exploited by an attacker; this is referred to as a zombie session.
    Rule Medium Severity
    Show

  • SRG-APP-000297-NDM-000281

    Group
    Show

  • The DataPower Gateway must display an explicit logout message to administrators indicating the reliable termination of authenticated communications sessions.

    If an explicit logout message is not displayed and the administrator does not expect to see one, the administrator may inadvertently leave a management session un-terminated. The session may remain...
    Rule Medium Severity
    Show

  • SRG-APP-000319-NDM-000283

    Group
    Show

  • The DataPower Gateway must automatically audit account enabling actions.

    Once an attacker establishes initial access to a system, the attacker often attempts to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to simply...
    Rule Medium Severity
    Show

  • SRG-APP-000320-NDM-000284

    Group
    Show

  • The DataPower Gateway must generate an immediate alert for account enabling actions.

    Once an attacker establishes initial access to a system, the attacker often attempts to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to simply...
    Rule Medium Severity
    Show

  • SRG-APP-000325-NDM-000285

    Group
    Show

  • The DataPower Gateway must be compliant with at least one IETF standard authentication protocol.

    Protecting access authorization information (i.e., access control decisions) ensures that authorization information cannot be altered, spoofed, or otherwise compromised during transmission. In dis...
    Rule Medium Severity
    Show

  • SRG-APP-000328-NDM-000286

    Group
    Show

  • If the DataPower Gateway uses discretionary access control, the DataPower Gateway must enforce organization-defined discretionary access control policies over defined subjects and objects.

    Discretionary Access Control (DAC) is based on the notion that individual network administrators are "owners" of objects and therefore have discretion over who should be authorized to access the ob...
    Rule Medium Severity
    Show

  • SRG-APP-000329-NDM-000287

    Group
    Show

  • If the DataPower Gateway uses role-based access control, the DataPower Gateway must enforce role-based access control policies over defined subjects and objects.

    Organizations can create specific roles based on job functions and the authorizations (i.e., privileges) to perform needed operations on organizational information systems associated with the organ...
    Rule Medium Severity
    Show

  • SRG-APP-000343-NDM-000289

    Group
    Show

  • The DataPower Gateway must audit the execution of privileged functions.

    Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and...
    Rule Medium Severity
    Show

  • SRG-APP-000353-NDM-000292

    Group
    Show

  • The DataPower Gateway must provide the capability for organization-identified individuals or roles to change the auditing to be performed based on all selectable event criteria within near-real-time.

    If authorized individuals do not have the ability to modify auditing parameters in response to a changing threat environment, the organization may not be able to effectively respond, and important ...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules