The IDPS must be configured to remove or disable non-essential features, functions, and services of the IDPS application.

From Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide

Associated with: CCI-000381

SV-45500r2_rule The IDPS must be configured to remove or disable non-essential features, functions, and services of the IDPS application.

Vulnerability discussion

An IDPS can be capable of providing a wide variety of capabilities. Not all of these capabilities are necessary. Unnecessary services, functions, and applications increase the attack surface (sum of attack vectors) of a system. These unnecessary capabilities are often overlooked and therefore may remain unsecured.This requirement applies to unnecessary features of the IDPS application itself.

Check content

Verify the IDPS is configured to remove or disable non-essential features, functions, and services of the IDPS application. If the IDPS is not configured to remove or disable non-essential features, functions, and services of the IDPS application, this is a finding.

Fix text

Configure the IDPS to remove or disable non-essential features, functions, and services of the IDPS application.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.