The firewall implementation must use automated mechanisms to support auditing of the enforcement actions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000120-FW-000075	SRG-NET-000120-FW-000075	SRG-NET-000120-FW-000075_rule		Medium

Description
Changes to the hardware or software components of the firewall can have significant effects on the overall security of the network. Maintaining audit log records of access events helps to ensure change control is being implemented. Also, the log records support incident investigation.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000120-FW-000075_chk )
Review the firewall configuration settings to verify automated mechanisms are used to support the auditing of enforcement actions taken in response to access restrictions. If the firewall implementation does not have automated mechanisms in place for supporting the auditing of enforcement actions, this is a finding.

Fix Text (F-SRG-NET-000120-FW-000075_fix)
Enable automated mechanisms to support auditing of the enforcement actions taken in response to configured access restrictions.