DISA_STIG_EDB_PostgreSQL_Advanced_Server_v11_Windows_v2r4_OS.audit from DISA EDB Postgres Advanced Server v11 on Windows v2r4 STIG

EP11-00-000700 - The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

800-53|AC-2(1)

CAT|I

CCI|CCI-000015

Rule-ID|SV-224131r960768_rule

STIG-ID|EP11-00-000700

STIG-Legacy|SV-109393

STIG-Legacy|V-100289

Vuln-ID|V-224131

EP11-00-001100 - The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

800-53|AU-12b.

CAT|II

CCI|CCI-000171

Rule-ID|SV-224135r960882_rule

STIG-ID|EP11-00-001100

STIG-Legacy|SV-109401

STIG-Legacy|V-100297

Vuln-ID|V-224135

EP11-00-002300 - The EDB Postgres Advanced Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

800-53|AU-5b.

CCI|CCI-000140

Rule-ID|SV-224146r960915_rule

STIG-ID|EP11-00-002300

STIG-Legacy|SV-109423

STIG-Legacy|V-100319

Vuln-ID|V-224146

EP11-00-002400 - The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.

Rule-ID|SV-224147r960915_rule

STIG-ID|EP11-00-002400

STIG-Legacy|SV-109425

STIG-Legacy|V-100321

Vuln-ID|V-224147

EP11-00-002600 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized read access.

800-53|AU-9

CCI|CCI-000162

Rule-ID|SV-224148r960930_rule

STIG-ID|EP11-00-002600

STIG-Legacy|SV-109427

STIG-Legacy|V-100323

Vuln-ID|V-224148

EP11-00-002700 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-224149r960933_rule

STIG-ID|EP11-00-002700

STIG-Legacy|SV-109429

STIG-Legacy|V-100325

Vuln-ID|V-224149

EP11-00-002800 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-224150r960936_rule

STIG-ID|EP11-00-002800

STIG-Legacy|SV-109431

STIG-Legacy|V-100327

Vuln-ID|V-224150

EP11-00-002900 - The EDB Postgres Advanced Server must protect its audit features from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-224151r960939_rule

STIG-ID|EP11-00-002900

STIG-Legacy|SV-109433

STIG-Legacy|V-100329

Vuln-ID|V-224151

EP11-00-003000 - The EDB Postgres Advanced Server must protect its audit configuration from unauthorized modification.

CCI|CCI-001494

Rule-ID|SV-224152r960942_rule

STIG-ID|EP11-00-003000

STIG-Legacy|SV-109435

STIG-Legacy|V-100331

Vuln-ID|V-224152

EP11-00-003100 - The EDB Postgres Advanced Server must protect its audit features from unauthorized removal.

CCI|CCI-001495

Rule-ID|SV-224153r960945_rule

STIG-ID|EP11-00-003100

STIG-Legacy|SV-109437

STIG-Legacy|V-100333

Vuln-ID|V-224153

EP11-00-003200 - Software, applications, and configuration files that are part of, or related to, the Postgres Plus Advanced Server installation must be monitored to discover unauthorized changes.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-224154r960960_rule

STIG-ID|EP11-00-003200

STIG-Legacy|SV-109439

STIG-Legacy|V-100335

Vuln-ID|V-224154

EP11-00-003400 - Database software, including EDB Postgres Advanced Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

Rule-ID|SV-224157r960960_rule

STIG-ID|EP11-00-003400

STIG-Legacy|SV-109445

STIG-Legacy|V-100341

Vuln-ID|V-224157

EP11-00-003600 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be restricted to authorized users.

Rule-ID|SV-224159r960960_rule

STIG-ID|EP11-00-003600

STIG-Legacy|SV-109449

STIG-Legacy|V-100345

Vuln-ID|V-224159

EP11-00-003800 - Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-224161r960963_rule

STIG-ID|EP11-00-003800

STIG-Legacy|SV-109453

STIG-Legacy|V-100349

Vuln-ID|V-224161

EP11-00-003900 - Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.

Rule-ID|SV-224162r960963_rule

STIG-ID|EP11-00-003900

STIG-Legacy|SV-109455

STIG-Legacy|V-100351

Vuln-ID|V-224162

EP11-00-004000 - Access to external executables must be disabled or restricted.

Rule-ID|SV-224163r960963_rule

STIG-ID|EP11-00-004000

STIG-Legacy|SV-109457

STIG-Legacy|V-100353

Vuln-ID|V-224163

EP11-00-004200 - The EDB Postgres Advanced Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

800-53|IA-2

CCI|CCI-000764

Rule-ID|SV-224165r960969_rule

STIG-ID|EP11-00-004200

STIG-Legacy|SV-109461

STIG-Legacy|V-100357

Vuln-ID|V-224165

EP11-00-004400 - If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-224168r961029_rule

STIG-ID|EP11-00-004400

STIG-Legacy|SV-109467

STIG-Legacy|V-100363

Vuln-ID|V-224168

EP11-00-004500 - The EDB Postgres Advanced Server, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-224169r961038_rule

STIG-ID|EP11-00-004500

STIG-Legacy|SV-109469

STIG-Legacy|V-100365

Vuln-ID|V-224169

EP11-00-004600 - The EDB Postgres Advanced Server must enforce authorized access to all PKI private keys stored/utilized by the EDB Postgres Advanced Server.

800-53|IA-5(2)(b)

CCI|CCI-000186

Rule-ID|SV-224170r961041_rule

STIG-ID|EP11-00-004600

STIG-Legacy|SV-109471

STIG-Legacy|V-100367

Vuln-ID|V-224170

EP11-00-004850 - The EDB Postgres Advanced Server password file must not be used.

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-224173r961863_rule

STIG-ID|EP11-00-004850

STIG-Legacy|SV-110213

STIG-Legacy|V-101109

Vuln-ID|V-224173

EP11-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection.

800-53|IA-7

800-53|SC-13

CCI|CCI-000803

CCI|CCI-002450

Rule-ID|SV-224174r961050_rule

STIG-ID|EP11-00-004900

STIG-Legacy|SV-109477

STIG-Legacy|V-100373

Vuln-ID|V-224174

EP11-00-005700 - The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-224178r961128_rule

STIG-ID|EP11-00-005700

STIG-Legacy|SV-109483

STIG-Legacy|V-100379

Vuln-ID|V-224178

EP11-00-006100 - Access to database files must be limited to relevant processes and to authorized, administrative users.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-224181r961149_rule

STIG-ID|EP11-00-006100

STIG-Legacy|SV-109489

STIG-Legacy|V-100385

Vuln-ID|V-224181

EP11-00-008000 - The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.

800-53|AU-5(1)

CCI|CCI-001855

Rule-ID|SV-224198r961398_rule

STIG-ID|EP11-00-008000

STIG-Legacy|SV-109521

STIG-Legacy|V-100417

Vuln-ID|V-224198

EP11-00-008400 - The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

800-53|CM-11(2)

CCI|CCI-001812

Rule-ID|SV-224200r981956_rule

STIG-ID|EP11-00-008400

STIG-Legacy|SV-109525

STIG-Legacy|V-100421

Vuln-ID|V-224200

EP11-00-008500 - The EDB Postgres Advanced Server must enforce access restrictions associated with changes to the configuration of the EDB Postgres Advanced Server or database(s).

800-53|CM-5(1)

CCI|CCI-001813

Detections

Analytics

EDB PostgreSQL Advanced Server v11 Windows OS Audit v2r4

Audit Details

File Details

Audit Changelog

No revisions found