Upon successful logon, the IDPS must display the date and time of the last logon of the user.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-34515 | SRG-NET-000048-IDPS-00042 | SV-45357r1_rule | Low |
| Description |
|---|
| Providing users with information regarding the date and time of their last successful login allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators. Control applies to classified systems. |
| STIG | Date |
|---|---|
| Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide | 2012-11-19 |
Details
| Check Text ( C-42705r1_chk ) |
|---|
| Connect to the management console using the GUI. Note if the date and time of last login is displayed. Connect to the maintenance console using the SSH interface. Note if the date and time of last login is displayed. Repeat the above steps for each sensor. If the date and time of the last login of the user is not displayed for both the GUI and SSH interface, this is a finding. |
| Fix Text (F-38753r1_fix) |
|---|
| Configure the IDPS management console GUI and SSH interface to display the date and time of the last login by the user. |