Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
When using third-party DNS servers for zone transfers, each DNS server must use TSIG to uniquely identify the other server.
Description
Discussion Text
Without identifying devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. This applies to server-to-server (zone transfer) transactions only and is provided by TSIG, which enforces mutual server authentication using a key that is unique to each server pair (TSIG), thus uniquely identifying the other server.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.