The IDPS must be configured to enable automated mechanisms to support auditing of the enforcement actions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000120-IDPS-000111	SRG-NET-000120-IDPS-000111	SRG-NET-000120-IDPS-000111_rule		Medium

Description
Changes to the hardware or software components of the IDPS can have significant effects on the overall security of the network. Therefore, only qualified and authorized individuals allowed administrative access to the IDPS for implementing any changes or upgrades. Additionally, maintaining automated log records of access is essential for ensuring configuration change control is being implemented as intended and for supporting after-the-fact actions should the organization become aware of an unauthorized change to the information system.

Description

Changes to the hardware or software components of the IDPS can have significant effects on the overall security of the network. Therefore, only qualified and authorized individuals allowed administrative access to the IDPS for implementing any changes or upgrades. Additionally, maintaining automated log records of access is essential for ensuring configuration change control is being implemented as intended and for supporting after-the-fact actions should the organization become aware of an unauthorized change to the information system.

STIG	Date
IDPS Security Requirements Guide (SRG)	2012-03-08

Details

Check Text ( C-43242_chk )
Verify automated mechanisms such as logging and restricting configuration changes and updates for both hardware and software are in place. If auditing of access control restrictions for hardware and software updates is not enabled, this is a finding.

Fix Text (F-43242_fix)
Enable auditing of access restrictions to hardware and software updates.