Checklist Details for Desktop Application Security Checklist Version 3, Release 1.11

(Archived Revisions)

Checklist Highlights

Checklist Name:
Desktop Application Security Checklist
Version:
Version 3, Release 1.11
Tier:
III*
Review Status:
Under Review
Authority:
  • Governmental Authority: Defense Information Systems Agency
Publication Date:
07/24/2009
Supporting Resources:
Target Product:
Target Product CPE Name Product Category
Microsoft Windows XP Pro SP2 cpe:/o:microsoft:windows-nt:xp:sp2:pro (View CVEs)
  • Operating System
Symantec Antivirus cpe:/a:symantec:norton_antivirus (View CVEs)
  • Antivirus Software
Checklist Summary:
Desktop Application Security Checklist - Symantec Virus Software has been created to assist IT professionals, in particular system administrators and information security personnel, in effectively securing Windows XP Symantec Virus Scan installations.

The procedures in this document are part of the effort to ensure that the security configuration guidelines required by Department of Defense (DOD) Directive 8500.1, Information Assurance, and other relevant guidance have been properly implemented.


		    		
Checklist Role:
  • Antivirus Software
Known Issues:
- The user account from which Desktop Application Gold Disk is run must have Administrator privileges and have the User Right: Manage Auditing and Security Log. 

- Only the configuration checks that are included in the Desktop Application Gold Disk (Internet Explorer and Microsoft Office) will be evaluated as part of the formal review process. The IAVMs and security patches included on the Desktop Gold Disk are not evaluated as part of the Desktop Application review because they are already covered in either the appropriate Windows Operating System Gold Disk or the appropriate Post Gold Disk Scripts. These will remain in the Desktop Application Gold Disk for the SAs use.

                	
Target Audience:
Developped for the DOD.
This checklist has been created for IT professionals, particularly Windows system administrators and information security personnel. The document assumes that the reader has experience installing and administering applications on Windows-based systems in domain or standalone configurations.

                	
Target Operational Environment:
  • Managed
  • Specialized Security-Limited Functionality (SSLF)
Regulatory Compliance:
DOD Directive 8500.

                	
Comments/Warnings/Miscellaneous:
Please refer to the Checklist or the README.TXT files provided with the scripts for any comments, warnings, or detailed instructions
                	
                	
Product Support:
It should be noted that FSO Support for the STIGs, Checklists, and Tools is only available to DOD Customers.

			    	
Change History:
Version 1, Release 1.1, 2003-02-28
Version 1, Release 1.2, 2003-04-25
Version 1, Release 1.3, 2003-05-30
Version 1, Release 1.4, 2003-06-27
Version 1, Release 1.5, 2004-10-19
Version 1, Release 1.6, 2004-12-10
Version 1, Release 1.7, 2005-01-28
Version 1, Release 1.8, 2005-02-25
Version 1, Release 1.9, 2005-04-22
Version 1, Release 1.10, 2005-08-12
Version 2, Release 1.2, 2005-12-23
Version 2, Release 1.5, 2006-09-19
Version 3, Release 1.8 2008-12-26
Version 2, Release 1.6, 2006-11-24
Version 2, Release 1.7, 2007-01-26
Version 2, Release 1.8, 2007-03-23
Version 3.3.1, 2007-09
Version 3, Release 1.7, 2007-09-26
Version 3, Release 1.8, 2008-12-26
Version 3, Release 1.9, 2009-02-26

                        

* This checklist is still undergoing review for inclusion into the NCP at this tier ranking.