Detections
Analytics

CCI|CCI-002466

Title

Request data integrity verification on the name/address resolution responses the system receives from authoritative sources.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
Big Sur - Secure Name Address Resolution ServiceUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Secure Name Address Resolution ServiceUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Secure Name Address Resolution ServiceUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Secure Name Address Resolution ServiceUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Secure Name Address Resolution ServiceUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Secure Name Address Resolution ServiceUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Secure Name Address Resolution ServiceUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Secure Name Address Resolution ServiceUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
BIND-9X-001650 - A BIND 9.x server implementation must maintain the integrity and confidentiality of DNS information while it is being prepared for transmission, in transmission, and in use and must perform integrity verification and data origin verification for all DNS information.UnixDISA BIND 9.x STIG v3r1
Catalina - Secure Name Address Resolution ServiceUnixNIST macOS Catalina v1.5.0 - 800-53r4 Low
Catalina - Secure Name Address Resolution ServiceUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Secure Name Address Resolution ServiceUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Secure Name Address Resolution ServiceUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Secure Name Address Resolution ServiceUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Secure Name Address Resolution ServiceUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Secure Name Address Resolution ServiceUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Secure Name Address Resolution ServiceUnixNIST macOS Catalina v1.5.0 - 800-53r5 Low
EX19-ED-000224 - The Exchange Edge server must point to a trusted list of DNS servers for external and internal resolution.WindowsDISA Microsoft Exchange 2019 Edge Server STIG v2r2
F5BI-DN-300013 - An authoritative name server must be configured to enable DNSSEC Resource Records.F5DISA F5 BIG-IP TMOS DNS STIG v1r1
Monterey - Secure Name Address Resolution ServiceUnixNIST macOS Monterey v1.0.0 - 800-53r4 Low
Monterey - Secure Name Address Resolution ServiceUnixNIST macOS Monterey v1.0.0 - 800-53r4 Moderate
Monterey - Secure Name Address Resolution ServiceUnixNIST macOS Monterey v1.0.0 - 800-53r5 Low
Monterey - Secure Name Address Resolution ServiceUnixNIST macOS Monterey v1.0.0 - All Profiles
Monterey - Secure Name Address Resolution ServiceUnixNIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Secure Name Address Resolution ServiceUnixNIST macOS Monterey v1.0.0 - 800-53r5 Moderate
Monterey - Secure Name Address Resolution ServiceUnixNIST macOS Monterey v1.0.0 - CNSSI 1253
Monterey - Secure Name Address Resolution ServiceUnixNIST macOS Monterey v1.0.0 - 800-53r5 High
WDNS-SC-000015 - The Windows DNS secondary server must request data integrity verification from the primary server when requesting name/address resolution.WindowsDISA Microsoft Windows 2012 Server Domain Name System STIG v2r7