Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The network device must generate audit log events for a locally developed list of auditable events.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-55295 | SRG-APP-000516-NDM-000334 | SV-69541r2_rule | Medium |
| Description |
|---|
| Auditing and logging are key components of any security architecture. Logging the actions of specific events provides a means to investigate an attack; to recognize resource utilization or capacity thresholds; or to identify an improperly configured network device. If auditing is not comprehensive, it will not be useful for intrusion monitoring, security investigations, and forensic analysis. |
| STIG | Date |
|---|---|
| Network Device Management Security Requirements Guide | 2017-12-28 |
Details
| Check Text ( C-55915r2_chk ) |
|---|
| Determine if the network device generates audit log events for a locally developed list of auditable events. If the network device is not configured to generate audit log events for a locally developed list of auditable events, this is a finding. |
| Fix Text (F-60159r3_fix) |
|---|
| Configure the network device to generate audit log events for a locally developed list of auditable events. |