Rule ID
SV-251362r853650_rule
Version
V10R7
CCIs
CCI-001902
In order to trace, audit, and investigate suspicious activity, DHCP servers within the SIPRNet infrastructure must have the minimum lease duration time configured to 30 or more days.
Review the configuration of SIPRNet DHCP servers to verify that the lease duration is set to a minimum of thirty days. If the lease duration is less than thirty days, this is a finding.
Configure any DHCP server used on the SIPRNet with a minimum lease duration of thirty days.