Skip to content

I - Mission Critical Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000023-NDM-000205

    <GroupDescription></GroupDescription>
    Group
  • Access to the MQ Appliance network element must use two or more authentication servers for the purpose of granting administrative access.

    &lt;VulnDiscussion&gt;All accounts used for access to the MQ Appliance network device are privileged or system-level accounts. Therefore, if accoun...
    Rule Medium Severity
  • SRG-APP-000025-NDM-000207

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance network device access must automatically disable accounts after a 35-day period of account inactivity.

    &lt;VulnDiscussion&gt;Since the accounts in the MQ Appliance network device are privileged or system-level accounts, account management is vital to...
    Rule Medium Severity
  • SRG-APP-000065-NDM-000214

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance network device must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

    &lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise...
    Rule Medium Severity
  • SRG-APP-000068-NDM-000215

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance network device must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

    &lt;VulnDiscussion&gt;Display of the DoD-approved use notification before granting access to the MQ Appliance network device ensures privacy and se...
    Rule Medium Severity
  • SRG-APP-000079-NDM-000219

    <GroupDescription></GroupDescription>
    Group
  • The MQ Appliance network device must notify the administrator of changes to access and/or privilege parameters of the administrator account that occurred since the last logon.

    &lt;VulnDiscussion&gt;Providing administrators with information regarding security-related changes to their account allows them to determine if any...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules