UCF STIG Viewer Logo

The network element must audit remote sessions for accessing an organizationally defined list of security functions and security-relevant information.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-NET-000066-IDPS-000015 SRG-NET-000066-IDPS-000015 SRG-NET-000066-IDPS-000015_rule Low
Description
Remote access services enable users outside of the enclave to have access to data and services within the private network. In many instances these connections traverse the Internet. Monitoring of remote access sessions allows organizations to audit user activities and to ensure compliance with the remote access policy. Unless restrictions are put in place, a user connecting to the LAN via remote access can access/perform everything he/she could access/perform as those connected internally. Auditing will ensure unauthorized access to the enclave's resources and data will not go undetected.
STIG Date
IDPS Security Requirements Guide (SRG) 2012-03-08

Details

Check Text ( C-43128_chk )
Verify management console has the audit function enabled for each interface.

If auditing is not enabled on all interface ports, this is a finding.
Fix Text (F-43128_fix)
Enable auditing for all used connections on the sensors.