Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-55295 | SRG-APP-000516-NDM-000334 | SV-69541r3_rule | Medium |
Description |
---|
Auditing and logging are key components of any security architecture. Logging the actions of specific events provides a means to investigate an attack; to recognize resource utilization or capacity thresholds; or to identify an improperly configured network device. If auditing is not comprehensive, it will not be useful for intrusion monitoring, security investigations, and forensic analysis. |
STIG | Date |
---|---|
Network Device Management Security Requirements Guide | 2020-06-03 |
Check Text ( C-55915r2_chk ) |
---|
Determine if the network device generates audit log events for a locally developed list of auditable events. If the network device is not configured to generate audit log events for a locally developed list of auditable events, this is a finding. |
Fix Text (F-60159r3_fix) |
---|
Configure the network device to generate audit log events for a locally developed list of auditable events. |