STIGUI
V-65285CAT II — Medium severitySV-79775r1_rule

The DataPower Gateway providing content filtering must generate a log record when unauthorized network services are detected.

Rule version WSDP-AG-000109 · STIG v1 · 2016-01-21

Discussion

Unauthorized or unapproved network services lack organizational verification or validation and therefore may be unreliable or serve as malicious rogues for valid services.

Examples of network services include service-oriented architectures (SOAs), cloud-based services (e.g., infrastructure as a service, platform as a service, or software as a service), cross-domain, Voice Over Internet Protocol, Instant Messaging, auto-execute, and file sharing.

Check

Using the WebGUI, go to Network >> Management >> Web Management Service. Verify that the "WS-Management endpoint" checkbox is checked and that an IP and port for the WS-Management endpoint to connect to is configured.

If the WS-Management endpoint is not enabled (checked) or not configured, this is a finding.

Fix

Using the WebGUI, go to Network >> Management >> Web Management Service. Check the "WS-Management endpoint" checkbox. Configure an IP and port for the WS-Management endpoint to connect to.

Identifiers

Group ID
V-65285
Group title
SRG-NET-000385-ALG-000137
Rule ID
SV-79775r1_rule
Check ID
C-65913r1_chk
Fix ID
F-71225r1_fix