Checklist Summary:

The EnterpriseDB (EDB) Postgres Advanced Server 11 on Windows Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. This document is meant for use in conjunction with the Microsoft IIS, Apache Web Server, Apache Tomcat, .NET, Operating System (OS), and/or other STIGs as applicable to the DB host environment. It is based on the Database Security Requirements Guide (SRG) Version 2, Release 6, which in turn derives its cybersecurity controls from National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, Revision 4. Postgres (also known as PostgreSQL) is an open-source, community-developed database management system. EDB is a value-added distributor of Postgres; its extensions and modifications to the base product address performance, security, and enterprise operations. This STIG is specific to EDB Postgres Advanced Server. Some of the guidance may be applicable to other Postgres implementations, but because EDB’s product includes many modifications to the generic version, this cannot be guaranteed.

Checklist Role:

• Application Server
• Database Management System

Known Issues:

Not provided.

Target Audience:

Not provided.

Target Operational Environment:

• Specialized Security-Limited Functionality (SSLF)
• Managed

Testing Information:

Not provided.

Regulatory Compliance:

Department of Defense [DoD] Directive 8500

Comments/Warnings/Miscellaneous:

Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document.

Disclaimer:

Not provided.

Product Support:

Parties within the DoD and Federal Government’s computing environments can obtain the applicable STIG from the Cyber Exchange website at https://cyber.mil/. This site contains the latest copies of STIGs, SRGs, and other related security information. Those without a Common Access Card (CAC) that has DoD Certificates can obtain the STIG from https://public.cyber.mil/.

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

New Checklist - 6/5/2020
Updated resource title per DISA - 6/15/2020
Status Updated to FINAL- 7/15/2020
Updated Resource Title per DISA - 7/15/2020
Updated URL per DISA - 10/28/20
updated SHA - 10/29/2020
Updated resource per DISA - 8/1/22
updated URLs - 1/26/24
Updated Version, Resources, SHA and Status - 08/08/2024

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 08/08/2024