Check: NET-IDPS-033
Network Infrastructure Policy STIG:
NET-IDPS-033
(in versions v10 r6 through v9 r2)
Title
The organization must establish weekly data backup procedures for the network Intrusion Detection and Prevention System (IDPS) data. (Cat II impact)
Discussion
IDPS data needs to be backed up to ensure preservation in the case a loss of data due to hardware failure or malicious activity.
Check Content
Interview the SA to determine the IDPS backup procedures as well as have SA display the backup files saved on the file server. If the IDPS data is not backed up on a weekly basis, this is a finding.
Fix Text
The organization must establish weekly backup procedures for the network IDS/IPS data.
Additional Identifiers
Rule ID: SV-251346r805993_rule
Vulnerability ID: V-251346
Group Title: NET-IDPS-033
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
Number | Title |
---|---|
CM-6 |
Configuration Settings |