II - Mission Support Public
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000431
Group -
Trust must be established prior to enabling the loading of remote code in .Net 4.
In the .NET Framework version 3.5 and earlier versions, if an application assembly loaded code/objects from a remote location, that assembly would run partially trusted with a permissions grant set...Rule Medium Severity -
SRG-APP-000516
Group -
.NET default proxy settings must be reviewed and approved.
The .Net framework can be configured to utilize a different proxy or altogether bypass the default proxy settings in the client's browser. This may lead to the framework using a proxy that is not ...Rule Low Severity -
SRG-APP-000095
Group -
Event tracing for Windows (ETW) for Common Language Runtime events must be enabled.
Event tracing captures information about applications utilizing the .NET CLR and the .NET CLR itself. This includes security oriented information, such as Strong Name and Authenticode verification....Rule Medium Severity -
SRG-APP-000431
Group -
Software utilizing .Net 4.0 must be identified and relevant access controls configured.
With the advent of .Net 4.0, the .Net framework no longer directly configures or enforces security policy for .Net applications. This task is now relegated to the operating system layer and the se...Rule Medium Severity -
SRG-APP-000219
Group -
Remoting Services TCP channels must utilize authentication and encryption.
Note: Microsoft recommends using the Windows Communication Framework (WCF) rather than .Net remoting. New development projects should refrain from using .Net remoting capabilities whenever possible...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules