The firewall implementation must allocate firewall application log record storage capacity.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-37353	SRG-NET-999999-FW-000183	SV-49114r1_rule		Low

Description
The firewall implementation must allocate enough storage capacity to contain log records. If the log storage capacity is exceeded, the firewall may malfunction or shutdown. The site would lose valuable data needed for investigating security incidents.

STIG	Date
Firewall Security Requirements Guide	2013-04-24

Details

Check Text ( C-45600r1_chk )
Examine the firewall application log configuration. Verify a dedicated amount of space has been allocated for the events log and this space is not usable by other applications or processes. If the firewall implementation is not configured to allocate sensor events log record storage capacity, this is a finding.

Fix Text (F-42278r1_fix)
Configure the firewall implementation to allocated space that is dedicated to application log record storage.