← Back to Unified Endpoint Management Server Security Requirements Guide

V-234353

CAT II (Medium)

The firewall protecting the UEM server platform must be configured so only DoW-approved ports, protocols, and services are enabled. (Refer to the DoW Ports, Protocols, Services Management [PPSM] Category Assurance Levels [CAL] list for DoW-approved ports, protocols, and services).

Rule ID

SV-234353r1212982_rule

STIG

Unified Endpoint Management Server Security Requirements Guide

Version

V2R5

CCIs

CCI-000382

Discussion

All ports, protocols, and services used on DoW networks must be approved and registered via the DoW PPSM process. This is to ensure a risk assessment has been completed before a new port, protocol, or service is configured on a DoW network and has been approved by proper DoW authorities. Otherwise, the new port, protocol, or service could cause a vulnerability to the DoW network, which could be exploited by an adversary. Satisfies:FMT_SMR.1.1/SERVER_CONF_SERVER b

Check Content

Verify the firewall protecting the UEM server platform is configured so that only DoW-approved ports, protocols, and services are enabled. (Refer to the DoW PPSM CAL list for DoW-approved ports, protocols, and services).

If the firewall protecting the UEM server platform is not configured so that only DoW-approved ports, protocols, and services are enabled, this is a finding.

Fix Text

Configure the firewall protecting the UEM server platform so that only DoW-approved ports, protocols, and services are enabled. (Refer to the DoW PPSM CAL list for DoW-approved ports, protocols, and services).