An error occurred:

Microsoft Windows 2008 Server Domain Name System STIG

Microsoft Windows 2008 Server Domain Name System Security Technical Implementation Guide

ID Vuln ID Title Cat Status
2.005 V-1073 Systems must be maintained at a supported version of an operating system. Cat I
WDNS-AC-000001 V-58237 The Windows 2008 DNS Server must restrict incoming dynamic update requests to known clients. Cat II
WDNS-AU-000001 V-58543 The Windows 2008 DNS Server must be configured to record, and make available to authorized personnel, who added/modified/deleted DNS zone information. Cat II
WDNS-AU-000003 V-58547 The Windows 2008 DNS Server must, in the event of an error validating another DNS servers identity, send notification to the DNS administrator. Cat II
WDNS-AU-000005 V-58549 The Windows 2008 DNS Server log must be enabled. Cat II
WDNS-AU-000007 V-58553 The Windows 2008 DNS Server logging criteria must only be configured by the ISSM or individuals appointed by the ISSM. Cat II
WDNS-AU-000016 V-58573 The Windows 2008 DNS Servers audit records must be backed up at least every seven days onto a different system or system component than the system or component being audited. Cat II
WDNS-CM-000002 V-58577 The Windows DNS name servers for a zone must be geographically dispersed. Cat II
WDNS-CM-000003 V-58579 The Windows 2008 DNS Server must prohibit recursion on authoritative name servers for which forwarders have not been configured for external queries. Cat II
WDNS-CM-000004 V-58581 Forwarders on an authoritative Windows 2008 DNS Server, if enabled for external resolution, must only forward to either an internal, non-AD-integrated DNS server or to the DoD Enterprise Recursive Services (ERS). Cat II
WDNS-CM-000005 V-58583 The Windows 2008 DNS Server with a caching name server role must restrict recursive query responses to only the IP addresses and IP address ranges of known supported clients. Cat II
WDNS-CM-000010 V-58593 The Windows 2008 DNS Servers zone files must have NS records that point to active name servers authoritative for the domain specified in that record. Cat I
WDNS-CM-000012 V-58595 All authoritative name servers for a zone must be located on different network segments. Cat II
WDNS-CM-000013 V-58597 All authoritative name servers for a zone must have the same version of zone information. Cat II
WDNS-CM-000016 V-58603 For zones split between the external and internal sides of a network, the RRs for the external hosts must be separate from the RRs for the internal hosts. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.