The network element must protect audit tools from unauthorized access.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34042	SRG-NET-000101-DNS-NA	SV-44495r1_rule		Medium

Description
Auditing and logging are key components of any security architecture. It is essential for security personnel to know what is being done, what attempted to be done, where it was done, when it was done, and by whom in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured network element. It is imperative the auditing tools are secured and can only be accessed by authorized personnel. Protection of audit tools is not a function of DNS.

Description

Auditing and logging are key components of any security architecture. It is essential for security personnel to know what is being done, what attempted to be done, where it was done, when it was done, and by whom in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured network element. It is imperative the auditing tools are secured and can only be accessed by authorized personnel. Protection of audit tools is not a function of DNS.

STIG	Date
Domain Name System (DNS) Security Requirements Guide	2012-10-24

Details

Check Text ( C-42010r1_chk )
This is not a function of DNS.

Fix Text (F-37958r1_fix)
This requirement is NA for DNS. No fix required.