The network element must audit remote sessions for accessing an organizationally defined list of security functions and security-relevant information.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000066-RTR-NA	SRG-NET-000066-RTR-NA	SRG-NET-000066-RTR-NA_rule		Low

Description
Remote access services enable users outside of the enclave to have access to data and services within the private network. In many instances these connections traverse the Internet. Monitoring of remote access sessions allows organizations to audit user activities and to ensure compliance with the remote access policy. Unless restrictions are put in place, a user connecting to the LAN via remote access can access/perform everything they could access/perform as those connected internally. Monitoring will ensure unauthorized access to the enclave's resources and data will not go undetected. This requirement is applicable to network device management and is not applicable to the routing function.

Description

Remote access services enable users outside of the enclave to have access to data and services within the private network. In many instances these connections traverse the Internet. Monitoring of remote access sessions allows organizations to audit user activities and to ensure compliance with the remote access policy. Unless restrictions are put in place, a user connecting to the LAN via remote access can access/perform everything they could access/perform as those connected internally. Monitoring will ensure unauthorized access to the enclave's resources and data will not go undetected. This requirement is applicable to network device management and is not applicable to the routing function.

STIG	Date
Router Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000066-RTR-NA_chk )
This requirement is NA for router.

Fix Text (F-SRG-NET-000066-RTR-NA_fix)
This requirement is NA for router.