UCF STIG Viewer Logo

The IDPS must centralize the review and analysis of audit records from multiple network elements within the network.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-NET-000091-IDPS-NA SRG-NET-000091-IDPS-NA SRG-NET-000091-IDPS-NA_rule Low
Description
Auditing and logging are key components of any security architecture. It is essential for security personnel to know what is being done, what attempted to be done, where it was done, when it was done, and by whom in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify an improperly configured IDPS. In order to determine what is happening within the network infrastructure or to resolve and trace an attack, it is imperative to correlate the log data from multiple the IDPS to acquire a clear understanding as to what happened or is happening. Collecting log data and presenting the data in a single, consolidated view achieves this objective.
STIG Date
IDPS Security Requirements Guide (SRG) 2012-03-08

Details

Check Text ( C-43223_chk )
This requirement does not apply to IDPS.
Fix Text (F-43223_fix)
Not applicable for IDPS. No fix required.