The ALG must off-load audit records onto a different system or media than the system being audited.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000334-ALG-000050	SRG-NET-000334-ALG-000050	SRG-NET-000334-ALG-000050_rule		Medium

Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. This does not apply to audit logs generated on behalf of the device itself (management).

STIG	Date
Application Layer Gateway Security Requirements Guide	2014-06-27

Details

Check Text ( C-SRG-NET-000334-ALG-000050_chk )
Verify the ALG off-loads audit records onto a different system or media than the system being audited. If the ALG does not off-load audit records onto a different system or media than the system being audited, this is a finding.

Fix Text (F-SRG-NET-000334-ALG-000050_fix)
Configure the ALG to off-load audit records onto a different system or media than the system being audited.