STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 4 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.
← Back to STIGs

zOS WebsphereMQ for TSS Security Technical Implementation Guide

Archived

Version

V7R1

Release Date

Apr 2, 2025

SCAP Benchmark ID

S-5bc55280db6bb863215da6764122154e6a703439

Total Checks

17

Tags

other
CAT I: 2CAT II: 15CAT III: 0

This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.

Export CKLExport CSVExport JSON

Checks (17)

V-225623HIGHWebSphere MQ channel security must be implemented in accordance with security requirements.V-225624MEDIUMWebSphere MQ channel security is not implemented in accordance with security requirements.V-225625MEDIUMProduction WebSphere MQ Remotes must utilize Certified Name Filters (CNF).V-225626MEDIUMUser timeout parameter values for WebSphere MQ queue managers are not specified in accordance with security requirements. V-225627MEDIUMWebSphere MQ started tasks are not defined in accordance with the proper security requirements.V-225628MEDIUMWebSphere MQ all update and alter access to MQSeries/WebSphere MQ product and system data sets are not properly restricted.V-225629MEDIUMWebSphere MQ security class(es) must not be defined improperly.V-225630HIGHWebSphere MQ switch profiles must be properly defined to the appropriate ADMIN class. V-225631MEDIUMWebSphere MQ connection class resources must be protected properly.V-225632MEDIUMWebSphere MQ dead letter and alias dead letter queues are not properly defined.V-225633MEDIUMWebSphere MQ queue resource defined to the appropriate resource class must be protected in accordance with security requirements.V-225634MEDIUMWebSphere MQ Process resources must be protected in accordance with security requirements.V-225635MEDIUMWebSphere MQ Namelist resources must be protected in accordance with security requirements.V-225636MEDIUMWebSphere MQ alternate user resources defined to appropriate ADMIN resource class must be protected in accordance with security requirements.V-225637MEDIUMWebSphere MQ context resources defined to the appropriate ADMIN resource class must be protected in accordance with security requirements.V-225638MEDIUMWebSphere MQ command resources defined to MQCMDS resource class are not protected in accordance with security requirements.V-225639MEDIUMWebSphere MQ RESLEVEL resources in the appropriate ADMIN resource class must be protected in accordance with security requirements.