Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Forescout must be configured to notify the user before proceeding with remediation of the user's endpoint device when automated remediation is used. This is required for compliance with C2C Step 3.
Description
Discussion Text
Connections that bypass established security controls should be allowed only in cases of administrative need. These procedures and use cases must be approved by the information system security manager (ISSM).
Unless an exception is approved to not require notification of the user, the following configurations must be implemented:
- This setting may be sent from the assessment server, a central server, or from the remediation server.
- Verify the user is notified and accepts (e.g., using an accept button) that remediation is needed and is about to begin.
Unless an exception is approved to not require notification of the user, the following configurations must be implemented:
- This setting may be sent from the assessment server, a central server, or from the remediation server.
- Verify the user is notified and accepts (e.g., using an accept button) that remediation is needed and is about to begin.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.