An error occurred:

Infoblox 8.x DNS STIG

Infoblox 8.x DNS Security Technical Implementation Guide

ID Vuln ID Title Cat Status
IDNS-8X-400012 V-233870 In a split DNS configuration, where separate DNS service members are used between the external and internal networks, the internal DNS service member must be configured to not be reachable from outside resolvers. Cat II
IDNS-8X-400013 V-233871 Primary authoritative DNS service members must be configured to only receive zone transfer requests from specified secondary DNS service members. Cat II
IDNS-8X-400014 V-233872 The Infoblox system must use a security policy that limits the propagation of access rights. Cat II
IDNS-8X-400015 V-233873 The DNS implementation must implement internal/external role separation. Cat II
IDNS-8X-400016 V-233874 The Infoblox DNS service member must use current and valid root DNS service members. Cat II
IDNS-8X-400017 V-233875 The Infoblox NIOS version must be at the appropriate version. Cat II
IDNS-8X-400018 V-233876 The IP address for hidden master authoritative DNS service members must not appear in the DNS service members set in the zone database. Cat II
IDNS-8X-400019 V-233877 The Infoblox system must be configured to respond to DNS traffic only. Cat II
IDNS-8X-400020 V-233878 The Infoblox DNS service member must send outgoing DNS messages from a random port. Cat II
IDNS-8X-400021 V-233879 The private keys corresponding to both the Zone Signing Key (ZSK) and the Key Signing Key (KSK) must not be kept on the DNSSEC-aware primary authoritative DNS service member when the DNS service member does not support dynamic updates. Cat I
IDNS-8X-400022 V-233880 CNAME records must not point to a zone with lesser security for more than six months. Cat II
IDNS-8X-400023 V-233881 The Infoblox system must use the security configuration settings based on DoD security configuration or implementation guidance, including STIGs, NSA configuration guides, CTOs, and DTMs. Cat II
IDNS-8X-400024 V-233882 A secure out-of-band (OOB) network must be used for management of Infoblox Grid Members. Cat I
IDNS-8X-400025 V-233883 Infoblox systems must enforce current DoD password restrictions. Cat I
IDNS-8X-400026 V-233884 Infoblox Grid configuration must be backed up on a regular basis. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.