STIGUI
V-214225CAT II — Medium severitySV-214225r612370_rule

The DHCP service must not be enabled on an external authoritative name server.

Rule version IDNS-7X-001000 · STIG v2 · 2020-12-10

Discussion

The site DNS and DHCP architecture must be reviewed to ensure only the appropriate services are enabled on each Grid Member. An external authoritative name server must be configured to allow only authoritative DNS.

Check

Navigate to Grid >> Grid Manager >> Services tab.

Select "DHCP" and verify only internal Infoblox members have the service enabled.

If an external authoritative name server has DHCP enabled this is a finding.

Fix

Navigate to Data Management >> DHCP >> Members/Servers tab.

Select the Infoblox member using the check box and click "Stop" in the toolbar to disable the "DHCP" service.

Identifiers

Group ID
V-214225
Group title
SRG-APP-000142-DNS-000014
Rule ID
SV-214225r612370_rule
Check ID
C-15440r295938_chk
Fix ID
F-15438r295939_fix