CCI|CCI-001179

Provides the means to indicate the security status of child zones, when operating as part of a distributed, hierarchical namespace.

Reference: CCI - DISA Control Correlation Identifier

Category: 2024

Name	Plugin	Audit Name
BIND-9X-001770 - A BIND 9.x server must provide secure delegation to all child zones.	Unix	DISA BIND 9.x STIG v3r1
BIND-9X-001780 - The BIND 9.x server validity period for the RRSIGs covering the DS RR for zones delegated children must be no less than two days and no more than one week.	Unix	DISA BIND 9.x STIG v3r1
F5BI-DN-300030 - The validity period for the RRSIGs covering the DS RR for a zones delegated children must be no less than two days and no more than one week.	F5	DISA F5 BIG-IP TMOS DNS STIG v1r1
WDNS-SC-000008 - The Windows 2012 DNS Server must be configured with the DS RR carrying the signature for the RR that contains the public key of the child zone.	Windows	DISA Microsoft Windows 2012 Server Domain Name System STIG v2r7