DocAve must provide automated mechanisms for supporting account management functions.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-253513 | DCAV-00-000009 | SV-253513r836514_rule | CCI-000015 | medium |
| Description | ||||
| Remote access (e.g., Remote Desktop Protocol [RDP]) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. | ||||
| STIG | Date | |||
| AvePoint DocAve 6 Security Technical Implementation Guide | 2022-08-24 | |||
Details
Check Text (C-253513r836514_chk)
DocAve supports integration with Active Directory (AD) for automated account management.
Check the DocAve configuration to ensure AD Integration is enabled.
- Log on to DocAve with admin account.
- On the Control Panel page, in the Authentication Manager section, click "Authentication Manager".
- Navigate to AD Integration.
- Verify that the AD Integration option is enabled.
If the AD Integration option is not enabled, this is a finding.
Fix Text (F-56916r836513_fix)
Configure the DocAve configuration to ensure AD Integration is enabled.
- Log on to DocAve with admin account.
- On the Control Panel page, in the Authentication Manager section, click "Authentication Manager".
- Navigate to AD Integration.
- Set the Action of AD Integration to Enable.
- Save settings.
Add AD user or group to DocAve by Account Manager, realize automated mechanisms through AD account management functions.