Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Juniper Networks SRX Series Gateway IDPS must install updates for predefined signature objects, applications signatures, IDPS policy templates, and device software when new releases are available in accordance with organizational configuration management policy and procedures.
Description
Discussion Text
Failing to update malicious code protection mechanisms, including application software files, signature definitions, and vendor-provided rules, leaves the system vulnerable to exploitation by recently developed attack methods and programs.
The IDPS is a key malicious code protection mechanism in the enclave infrastructure. To ensure this protection is responsive to changes in malicious code threats, IDPS components must be updated, including application software files, anti-virus signatures, detection heuristics, vendor-provided rules, and vendor-provided signatures.
Updates must be installed in accordance with the CCB procedures for the local organization. However, at a minimum:
1. Updates designated as critical security updates by the vendor must be installed immediately.
2. Updates for predefined signature objects, applications signatures, IDPS policy templates, and device software must be installed immediately.
3. Updates for application software are installed in accordance with the CCB procedures.
4. Prior to automatically installing updates, either manual or automated integrity and authentication checking is required, at a minimum, for application software updates.
The IDPS is a key malicious code protection mechanism in the enclave infrastructure. To ensure this protection is responsive to changes in malicious code threats, IDPS components must be updated, including application software files, anti-virus signatures, detection heuristics, vendor-provided rules, and vendor-provided signatures.
Updates must be installed in accordance with the CCB procedures for the local organization. However, at a minimum:
1. Updates designated as critical security updates by the vendor must be installed immediately.
2. Updates for predefined signature objects, applications signatures, IDPS policy templates, and device software must be installed immediately.
3. Updates for application software are installed in accordance with the CCB procedures.
4. Prior to automatically installing updates, either manual or automated integrity and authentication checking is required, at a minimum, for application software updates.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.