STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 2 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← SC-21 — Secure Name/Address Resolution Service (Recursive or Caching Resolver)

CCI-002465

Definition

Request data origin authentication verification on the name/address resolution responses the system receives from authoritative sources.

Parent Control

SC-21Secure Name/Address Resolution Service (Recursive or Caching Resolver)System and Communications Protection

Linked STIG Checks (8)

V-272417CAT IA BIND 9.x server implementation must maintain the integrity and confidentiality of DNS information while it is being prepared for transmission, in transmission, and in use and must perform integrity verification and data origin verification for all DNS information.BIND 9.x Security Technical Implementation GuideV-205209CAT IIA DNS server implementation must request data origin authentication verification on the name/address resolution responses the system receives from authoritative sources.Domain Name System (DNS) Security Requirements GuideV-265982CAT IIAn authoritative name server must be configured to enable DNSSEC Resource Records.F5 BIG-IP TMOS DNS Security Technical Implementation GuideV-214191CAT IIA DNS server implementation must request data origin authentication verification on the name/address resolution responses the system receives from authoritative sources.Infoblox 7.x DNS Security Technical Implementation GuideV-233913CAT IIThe Infoblox DNS service member must request data origin authentication and data integrity verification on the name/address resolution responses the system receives from authoritative sources.Infoblox 8.x DNS Security Technical Implementation GuideV-215622CAT IIThe Windows DNS secondary servers must request data origin authentication verification from the primary server when requesting name/address resolution.Microsoft Windows 2012 Server Domain Name System Security Technical Implementation GuideV-259385CAT IIThe Windows DNS secondary servers must request data origin authentication verification from the primary server when requesting name/address resolution.Microsoft Windows Server Domain Name System (DNS) Security Technical Implementation GuideV-207489CAT IIThe VMM must request data origin authentication verification on the name/address resolution responses the system receives from authoritative sources.Virtual Machine Manager Security Requirements Guide