Dynamic Host Configuration Protocol (DHCP) servers used within SIPRNet infrastructure must be configured with a minimum lease duration time of 30 days.

In order to trace, audit, and investigate suspicious activity, DHCP servers within the SIPRNet infrastructure must have the minimum lease duration time configured to 30 or more days.

Review the configuration of SIPRNet DHCP servers to verify that the lease duration is set to a minimum of thirty days.

If the lease duration is less than thirty days, this is a finding.

Configure any DHCP server used on the SIPRNet with a minimum lease duration of thirty days.