Home
Security Hardening
EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EP11-00-004900 – The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection – openssl_conf
Details Use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect...
EP11-00-005700 – The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.
Details This control is intended to address the confidentiality and integrity of information at rest in non-mobile devices and covers...
EP11-00-006100 – Access to database files must be limited to relevant processes and to authorized, administrative users.
Details Applications, including DBMSs, must prevent unauthorized and unintended information transfer via shared system resources. Permitting only DBMS processes and...
EP11-00-008000 – The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.
Details Organizations are required to use a central log management system, so, under normal conditions, the audit space allocated to...
EP11-00-008400 – The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.
Details Allowing regular users to install software, without explicit privileges, creates the risk that untested or potentially malicious software will...
EP11-00-008500 – The EDB Postgres Advanced Server must enforce access restrictions associated with changes to the configuration of the EDB Postgres Advanced Server or database(s).
Details Failure to provide logical access restrictions associated with changes to configuration may have significant effects on the overall security...
EP11-00-008700 – The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.
Details Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats. A database cluster listens...
EP11-00-012700 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures – openssl_conf
Details Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must...
EP11-00-013200 – The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL – hostssl
Details Use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect...
EP11-00-013200 – The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL – openssl_conf
Details Use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect...

EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EP11-00-004900 – The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection – openssl_conf

EP11-00-005700 – The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.

EP11-00-006100 – Access to database files must be limited to relevant processes and to authorized, administrative users.

EP11-00-008000 – The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.

EP11-00-008400 – The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

EP11-00-008500 – The EDB Postgres Advanced Server must enforce access restrictions associated with changes to the configuration of the EDB Postgres Advanced Server or database(s).

EP11-00-008700 – The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.

EP11-00-012700 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures – openssl_conf

EP11-00-013200 – The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL – hostssl

EP11-00-013200 – The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL – openssl_conf