STIGs Image

DoD STIGs – V-32185

Overview:

Title: The application must employ automated mechanisms to facilitate the monitoring and control of remote access methods.

Vulnerability ID: V-32185

STIG ID:

IA Controls: None

Severity: medium

Description: Remote network access is accomplished by leveraging common communication protocols and establishing a remote connection. These connections will occur over the public Internet.

Remote access is any access to an organizational information system by a user (or an information system) communicating through an external, non-organization-controlled network (e.g., the Internet). Examples of remote access methods include dial-up, broadband, and wireless.

Automated monitoring of remote access sessions allows organizations to audit user activities on a variety of information system components (e.g., servers, workstations, notebook/laptop computers) and to ensure compliance with remote access policy.

Remote access applications such as those providing remote access to network devices and information systems and are individually configured with no monitoring or automation capabilities increase risk and makes remote user access management difficult at best.

Applications providing remote access capability need to provide the ability to automatically monitor and control remote user sessions. This includes the capability to directly trigger actions based on user activity or pass information and or data to a separate application or entity that can then perform automated tasks based on the information.

This requirement is specific to applications managing remote connections. This requirement is NA to databases.

Check Text: This check is NA for databases.

Fix Text: This fix is NA for databases.

Interpreting V-32185:

As noted this STIG does not apply to databases. It is still worth monitoring remote connections to the servers running you SQL Server environment.

Return to the DoD STIGs – Database Security Requirements Guide

Leave a Reply

Your email address will not be published. Required fields are marked *