The network element must backup system level audit event log records on an organizationally defined frequency onto a different system or media.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000105-FW-NA	SRG-NET-000105-FW-NA	SRG-NET-000105-FW-NA_rule		Low

Description
Auditing and logging are key components of any security architecture. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured network element. This control is not applicable to the firewall. Firewall audit logs must be aggregated and are then backed-up to the central aggregation log (e.g., silo server) in accordance with CCI-000537 and CCI-001348.

Description

Auditing and logging are key components of any security architecture. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured network element. This control is not applicable to the firewall. Firewall audit logs must be aggregated and are then backed-up to the central aggregation log (e.g., silo server) in accordance with CCI-000537 and CCI-001348.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000105-FW-NA_chk )
This requirement is NA for firewall. No fix required.

Fix Text (F-SRG-NET-000105-FW-NA_fix)
This requirement is NA for firewall. No fix required.