Details

The discover_db parameter specifies if the database will respond to a discovery request from a client. It is recommended that this parameter be set to DISABLE.

Solution

1. Connect to the DB2 database
db2 => connect to $DB2DATABASE user $USERNAME using $PASSWORD
2. Run the following command from the DB2 command window-
db2 => update database configuration using discover_db disable

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/162

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.
• CSCv6|3.1

Source

• Tenable.com/audits