RHEL-07-020019 - The Red Hat Enterprise Linux operating system must implement the Endpoint Security for Linux Threat Prevention tool.

Information

Adding endpoint security tools can provide the capability to automatically take actions in response to malicious behavior, which can provide additional agility in reacting to network threats. These tools also often include a reporting capability to provide network awareness of the system, which may not otherwise exist in an organization's systems management regime.

Solution

Install and enable the latest Trellix ENSLTP package.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_7_V3R15_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|CM-6b., 800-53|SI-4(5), CAT|II, CCI|CCI-000366, CCI|CCI-001263, Rule-ID|SV-214800r991589_rule, STIG-ID|RHEL-07-020019, STIG-Legacy|SV-102357, STIG-Legacy|V-92255, Vuln-ID|V-214800

Plugin: Unix

Control ID: 4ca9d13d187d6423d555e1f4765e2a0735a10954acca802dac15fa3763eb5b84