The network element must be configured to send an alert to designated personnel in the event of an audit processing failure.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-27083	SRG-NET-000088	SV-34378r1_rule		Medium

Description
Auditing and logging are key components of any security architecture. It is essential that security personnel know what is being done, what attempted to be done, where it was done, when it was done, and by whom in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify a network element that has been configured improperly. It is imperative that the network element is configured to generate an alarm when an audit failure occurs.

Description

Auditing and logging are key components of any security architecture. It is essential that security personnel know what is being done, what attempted to be done, where it was done, when it was done, and by whom in order to compile an accurate risk assessment. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or to simply identify a network element that has been configured improperly. It is imperative that the network element is configured to generate an alarm when an audit failure occurs.

STIG	Date
Network Security Requirements Guide	2011-12-28

Details

Check Text ( None )
None

Fix Text (None)
None