The network element must use cryptographic mechanisms to protect the integrity of audit information.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34048	SRG-NET-000106-DNS-NA	SV-44501r1_rule		Medium

Description
Auditing and logging are key components of any security architecture. It is essential for security personnel to know what is being done, what attempted to be done, where it was done, when it was done, and by whom in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured network element. Mechanisms, such as a signed hash using asymmetric cryptography, must be used to protect the integrity of the collected audit data. Protection of audit information is not a function of DNS.

Description

Auditing and logging are key components of any security architecture. It is essential for security personnel to know what is being done, what attempted to be done, where it was done, when it was done, and by whom in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured network element. Mechanisms, such as a signed hash using asymmetric cryptography, must be used to protect the integrity of the collected audit data. Protection of audit information is not a function of DNS.

STIG	Date
Domain Name System (DNS) Security Requirements Guide	2012-10-24

Details

Check Text ( C-42015r1_chk )
This is not a function of DNS.

Fix Text (F-37963r1_fix)
This requirement is NA for DNS. No fix required.