The IDPS must detect network services that have not been authorized or approved by the ISSO or ISSM, at a minimum.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-206910 | SRG-NET-000384-IDPS-00209 | SV-206910r856547_rule | CCI-002683 | medium |
| Description | ||||
| Unauthorized or unapproved network services lack organizational verification or validation and therefore may be unreliable or serve as malicious rogues for valid services. Examples of network services include service-oriented architectures (SOAs), cloud-based services (e.g., infrastructure as a service, platform as a service, or software as a service), cross-domain, Voice Over Internet Protocol, Instant Messaging, auto-execute, and file sharing. To comply with this requirement, the IDPS may be configured to detect services either directly or indirectly (i.e., by detecting traffic associated with a service). | ||||
| STIG | Date | |||
| Intrusion Detection and Prevention Systems Security Requirements Guide | 2025-09-22 | |||
Related Frameworks
1 mapping across 3 frameworks
Related Frameworks
SCF0 mappings
No source states a mapping between these directly.
Also reachable in 3 hops (1) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V3R4intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to
NIST 800-530 mappings
No source states a mapping between these directly.
Also reachable in 2 hops (1) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V3R4intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
CCI1 mapping
CCI-002683
1.00
- DISA STIG Benchmark (XCCDF)V3R4intersects(normalised)
Details
Check Text (C-206910r856547_chk)
Verify the IDPS detects network services that have not been authorized or approved by the ISSO or ISSM, at a minimum.
If the IDPS does not detect network services that have not been authorized or approved by the ISSO or ISSM, at a minimum, this is a finding.
Fix Text (F-7164r298243_fix)
Configure the IDPS to detect network services that have not been authorized or approved by the ISSO or ISSM, at a minimum.