DoD STIGs – V-32187

STIGs Image

Overview:

Title: The application must monitor for unauthorized remote connections to the information system on an organization defined frequency.

Vulnerability ID: V-32187

STIG ID:

IA Controls: None

Severity: medium

Description: Organizations need to monitor for unauthorized remote access connections to information systems in order to determine if break-in attempts or other unauthorized activity is occurring. There are already other SRG requirements for applications to generate audit connection logs to record connection activity. It is for the organization to determine which of those audited connections is unauthorized.

This task is usually handled by the IDS, log alarming or some other security mechanism specifically designed to automate and address this requirement.

This requirement is NA for applications not designed to monitor for unauthorized remote connections to information systems. Applications designed to meet this requirement must be able to do so on an organization defined frequency.

Check Text: This check is NA for databases.

Fix Text: This fix is NA for databases.

[divider]

Interpreting V-32187:

As noted this doesn’t apply to database systems, but it is worth keeping track of who is connecting to the SQL Server directly via applications such as Remote Desktop Services.

Return to the DoD STIGs – Database Security Requirements Guide

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.