Details

The discover_inst parameter specifies whether the instance can be discovered in the network. It is recommended that instances not be discoverable.

Solution

1. Attach to the DB2 instance
db2 => attach to $DB2INSTANCE
2. Run the following command from the DB2 command window-
db2 => update database manager configuration using discover_inst disable

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/162

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.

References

• 800-53|SC-30(5)

Source

• Tenable.com/audits