An error occurred:

EnterpriseDB Postgres Advanced Server (EPAS) STIG

EnterpriseDB Postgres Advanced Server (EPAS) Security Technical Implementation Guide

ID Vuln ID Title Cat Status
EPAS-00-000100 V-259210 The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types. Cat II
EPAS-00-000700 V-259211 The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. Cat I
EPAS-00-000800 V-259212 The EDB Postgres Advanced Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies. Cat I
EPAS-00-000900 V-259213 The EDB Postgres Advanced Server must protect against a user falsely repudiating having performed organization-defined actions. Cat II
EPAS-00-001000 V-259214 The EDB Postgres Advanced Server must provide audit record generation capability for DOD-defined auditable events within all EDB Postgres Advanced Server/database components. Cat II
EPAS-00-001100 V-259215 The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited. Cat II
EPAS-00-001200 V-259216 The EDB Postgres Advanced Server must generate audit records when privileges/permissions are retrieved. Cat II
EPAS-00-001300 V-259217 The EDB Postgres Advanced Server must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur. Cat II
EPAS-00-001400 V-259218 The EDB Postgres Advanced Server must initiate support of session auditing upon startup. Cat II
EPAS-00-001600 V-259219 The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish what type of events occurred. Cat II
EPAS-00-001700 V-259220 The EDB Postgres Advanced Server must produce audit records containing time stamps to establish when the events occurred. Cat II
EPAS-00-001800 V-259221 The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish where the events occurred. Cat II
EPAS-00-001900 V-259222 The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the sources (origins) of the events. Cat II
EPAS-00-002000 V-259223 The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the outcome (success or failure) of the events. Cat II
EPAS-00-002100 V-259224 The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.