Free DISA STIG and SRG Library | Vaulted

V-34625

The IDPS must be configured to remove or disable non-essential features, functions, and services of the IDPS application.

Finding ID
SRG-NET-000131-IDPS-00097
Rule ID
SV-45500r2_rule
Severity
Cat II
CCE
(None)
Group Title
SRG-NET-000131-IDPS-00097
CCI
CCI-000381
Target Key
(None)
Documentable
No
Discussion

An IDPS can be capable of providing a wide variety of capabilities. Not all of these capabilities are necessary. Unnecessary services, functions, and applications increase the attack surface (sum of attack vectors) of a system. These unnecessary capabilities are often overlooked and therefore may remain unsecured. This requirement applies to unnecessary features of the IDPS application itself.

Fix Text

Configure the IDPS to remove or disable non-essential features, functions, and services of the IDPS application.

Check Content

Verify the IDPS is configured to remove or disable non-essential features, functions, and services of the IDPS application. If the IDPS is not configured to remove or disable non-essential features, functions, and services of the IDPS application, this is a finding.