DNS Policy

The DNS Policy (V4 R1) has 24 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

24STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V4 · R1

CurrentPublished Fri Apr 27 2018

The underlying operating system of the DNS server is not in compliance with the appropriate OS STIG.

DNS Policy

Assessment Title

Rule Text

The underlying operating system of the DNS server is not in compliance with the appropriate OS STIG.

Description

Discussion Text

A vulnerability in the underlying operating system of a DNS server could potentially impact not only the DNS server but the entire network infrastructure to include the Global Information Grid (GIG).

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-13313

Rule

SV-13885r1_rule

Severity

medium

Rule Version

DNS0170

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the Operating System against the appropriate OS STIG. For a Windows system this would mean an evaluation with the Gold Disk; for a UNIX/LINUX system this would mean an evaluation using the SRR scripts. STIG compliance means that all findings are either closed, or there is a POA&M to address any outstanding vulnerabilities.

Implementation Procedure

Fix Text

The underlying Operating System of the DNS server must be in compliance with the appropriate OS STIG.

STIG check 21 of 24 in the DNS Policy STIG checklist

← Previous · V-13053The contents of zones are not reviewed at least annually.Next · V-13314 →A zone or name server does not have a backup administrator.