Dynamic Host Configuration Protocol (DHCP) servers used within SIPRNet infrastructure must be configured with a minimum lease duration time of 30 days.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-251362 | NET0199 | SV-251362r853650_rule | CCI-001902 | low |
| Description | ||||
| In order to trace, audit, and investigate suspicious activity, DHCP servers within the SIPRNet infrastructure must have the minimum lease duration time configured to 30 or more days. | ||||
| STIG | Date | |||
| Network Infrastructure Policy Security Technical Implementation Guide | 2024-08-02 | |||
Related Frameworks
2 paths across 2 frameworks
Related Frameworks
NIST 800-531 mapping
AU-10(1)
1.00
- DISA · V10R7 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-001902
1.00
- DISA · V10R7 · disa_xccdf · related
Details
Check Text (C-251362r853650_chk)
Review the configuration of SIPRNet DHCP servers to verify that the lease duration is set to a minimum of thirty days.
If the lease duration is less than thirty days, this is a finding.
Fix Text (F-54750r806040_fix)
Configure any DHCP server used on the SIPRNet with a minimum lease duration of thirty days.