800-53|SC-20(2)

DATA ORIGIN / INTEGRITY

The information system provides data origin and integrity protection artifacts for internal name/address resolution queries.

Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Parent Title: SECURE NAME / ADDRESS RESOLUTION SERVICE (AUTHORITATIVE SOURCE)

Family: SYSTEM AND COMMUNICATIONS PROTECTION

Name	Plugin	Audit Name
BIND-9X-001650 - A BIND 9.x server implementation must maintain the integrity and confidentiality of DNS information while it is being prepared for transmission, in transmission, and in use and must perform integrity verification and data origin verification for all DNS information.	Unix	DISA BIND 9.x STIG v3r1
F5BI-DN-300013 - An authoritative name server must be configured to enable DNSSEC Resource Records.	F5	DISA F5 BIG-IP TMOS DNS STIG v1r1
WDNS-SC-000003 - The Windows 2012 DNS Servers IP address must be statically defined and configured locally on the server.	Windows	DISA Microsoft Windows 2012 Server Domain Name System STIG v2r7
WDNS-SC-000004 - The Windows 2012 DNS Server must return data information in responses to internal name/address resolution queries.	Windows	DISA Microsoft Windows 2012 Server Domain Name System STIG v2r7
WDNS-SC-000005 - The Windows 2012 DNS Server must use DNSSEC data within queries to confirm data origin to DNS resolvers.	Windows	DISA Microsoft Windows 2012 Server Domain Name System STIG v2r7