ACTIVE DIRECTORY SECURITY CHECKLIST ... - Leet Upload

Active Directory Checklist, V1R1.2 Field Security Operations
22 September 2006 Defense Information Systems Agency
DS05.0370 Synch\Maint Mutual Authentication
STIG ID \ V-Key DS05.0370 \ V0011773
Severity Cat III
Short Name Synch\Maint Mutual Authentication
IA Controls ECTM-1. ECTM-2
MAC /Conf 1-CSP, 2-CSP, 3-CSP
References AD STIG 2.3.3.8
Long Name: A synch\maint implementation does not perform authentication of the
synch\maint client and target directory server (mutual authentication).
Checks:
• Interview the Application SA.
• Review the application documentation or configuration settings to determine if
the synch\maint implementation performs authentication of the synch\maint client
*and* the target directory server.
- For client authentication this could include the use of an ID\password for the
client to access the server.
- For the server authentication this could include the use of LDAPS or HTTPS in
which the client validates the server’s PKI certificate.
• If the synch\maint implementation does not perform mutual authentication, then
this is a Finding.
UNCLASSIFIED
3-25