DoD STIG documentation

[TerryBrickman]

I am currently in the process of trying to get 2 appliances approved to be on a DoD network.  I have looked and verified that there are currently no DISA STIGs provided that apply to RSA directly.  Are there any guides that would assist in setting up these devices correctly so that they will pass Nessus scans against them that check for SUSE Linux compliance.  Also, is there any documentation that would justify the inability to change OS level configurations due to the fact that it is a vendor modified/controlled operating system.

[EdwardDavis]

Discussions about STiG specifics and RSA Auth Manager servers is customer and RSA confidential information. You will need to have a current support contract, but then open a support case related to Auth Manager and STiG and you will be able to get the info you need. In Summary yes we provide STiG hardening but won't go into details on this forum about specifics. Or you can go directly to RSA Professional Services and they can talk to you about it.

[JonConnell]

Thank you I have the exact same question.  I'll open a case now.

[TerryBrickman]

Let me guess DoD PKI TASKORD?  Seems to be a lot of this going around right now.