Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
MongoDB must be configured to restrict the use of administrator access to authorized IP addresses.
Description
Discussion Text
MongoDB will use Authentication Restrictions to enforce network-based separation of admin users from application users on the same port.
With Authentication Restrictions, the database can be configured to specify a list of IP addresses and CIDR ranges from which a user is allowed to connect to the server or from which the server can accept users.
Authentication Restrictions addresses the following:
- Network-Based Separation: Admin users are restricted to connecting only from designated admin networks/IPs, while application users are restricted to the application subnet.
- Unauthorized Access Mitigation: Even if credentials are compromised, connections are blocked from unauthorized networks at the authentication level, leaving no chance for bypass.
With Authentication Restrictions, the database can be configured to specify a list of IP addresses and CIDR ranges from which a user is allowed to connect to the server or from which the server can accept users.
Authentication Restrictions addresses the following:
- Network-Based Separation: Admin users are restricted to connecting only from designated admin networks/IPs, while application users are restricted to the application subnet.
- Unauthorized Access Mitigation: Even if credentials are compromised, connections are blocked from unauthorized networks at the authentication level, leaving no chance for bypass.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.