The network element must provide near real-time alerts when any of the organizationally defined list of compromise or potential compromise indicators occur.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000257-FW-NA	SRG-NET-000257-FW-NA	SRG-NET-000257-FW-NA_rule		Medium

Description
When a compromise, potential compromise, or breach has been discovered by the intrusion detection system, it is critical the appropriate personnel are notified via an alert mechanism. Near real-time alerts for critical events allow the administrators to respond to these potential compromise indicators since they may miss other types of alerts if they are not currently logged into the network element. This control applies to monitoring by intrusion detection systems and is not applicable to the firewall function.

Description

When a compromise, potential compromise, or breach has been discovered by the intrusion detection system, it is critical the appropriate personnel are notified via an alert mechanism. Near real-time alerts for critical events allow the administrators to respond to these potential compromise indicators since they may miss other types of alerts if they are not currently logged into the network element. This control applies to monitoring by intrusion detection systems and is not applicable to the firewall function.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000257-FW-NA_chk )
This requirement is NA for firewall. No fix required.

Fix Text (F-SRG-NET-000257-FW-NA_fix)
This requirement is NA for firewall. No fix required.