Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-7991 | DSN18.06 | SV-8477r2_rule | ECSC-1 | Low |
Description |
---|
ANI must be enabled on modem lines to record access to remote access ports when this function is available. The logs will be maintained and reviewed. ANI logs should be kept for the previous twelve months. ANI logs are ideal for auditing unauthorized accesses and toll-fraud. |
STIG | Date |
---|---|
Defense Switched Network (DSN) STIG | 2015-08-11 |
Check Text ( C-61959r1_chk ) |
---|
Review site documentation to confirm ANI is enabled when available. If ANI is available but not enabled on all modems connected to DSN system, this is a finding. |
Fix Text (F-7566r2_fix) |
---|
Implement ANI when available on all modems connected to DSN system. Maintain and review ANI logs periodically. ANI logs should be stored for a period of twelve months. |