← Back to Intrusion Detection and Prevention Systems Security Requirements Guide

V-206889

CAT II (Medium)

The IPS must block malicious code.

Rule ID

SV-206889r1137734_rule

STIG

Intrusion Detection and Prevention Systems Security Requirements Guide

Version

V3R4

CCIs

CCI-001243

Discussion

Configuring the IPS to blocks, drops, and/or quarantine based on local organizational incident handling procedures minimizes the impact of this code on the network.

Check Content

If the device being reviewed is an IDS, this is not applicable.

Verify the IPS blocks malicious code.

If the IPS does not block malicious code, this is a finding.

Fix Text

Configure the IPS to block malicious code.