The network element must support the requirement to centrally manage the content of audit records generated by network infrastructure components.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-27004	SRG-NET-000081	SV-34298r1_rule		Medium

Description

Centrally managing audit data provides for easier management of network events and is an effective facility for monitoring and the automatic generation of alert notification. The repository of audit data can facilitate troubleshooting when problems are encountered and can assist in performing root cause analysis. A repository of audit data can also be correlated in real time to identify suspicious behavior or be archived for review at a later time for research and analysis.

STIG	Date
Network Security Requirements Guide	2011-12-28

Details

Check Text ( None )
None

Fix Text (None)
None