Infoblox 7.x DNS Security Technical Implementation Guide

The Infoblox 7.x DNS Security Technical Implementation Guide (V2 R2) has 67 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

67STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Mon Jan 05 2026 What changed in V2R2

The DHCP service must not be enabled on an external authoritative name server.

Infoblox 7.x DNS Security Technical Implementation Guide

Assessment Title

Rule Text

The DHCP service must not be enabled on an external authoritative name server.

Description

Discussion Text

The site DNS and DHCP architecture must be reviewed to ensure only the appropriate services are enabled on each Grid Member. An external authoritative name server must be configured to allow only authoritative DNS.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-214225

Rule

SV-214225r1043177_rule

Severity

medium

Rule Version

IDNS-7X-001000

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Navigate to Grid >> Grid Manager >> Services tab.

Select "DHCP" and verify only internal Infoblox members have the service enabled.

If an external authoritative name server has DHCP enabled this is a finding.

Implementation Procedure

Fix Text

Navigate to Data Management >> DHCP >> Members/Servers tab.

Select the Infoblox member using the check box and click "Stop" in the toolbar to disable the "DHCP" service.

STIG check 65 of 67 in the Infoblox 7.x DNS STIG checklist

← Previous · V-214224Infoblox systems must be configured with current DoD password restrictions.Next · V-214226 →A secure Out Of Band (OOB) network must be utilized for management of Infoblox Grid Members.