STIGQter: STIG Summary: Network Device Management Security Requirements Guide Version: 4 Release: 1 Benchmark Date: 23 Apr 2021:

The network device must generate audit records when successful/unsuccessful attempts to access privileges occur.

DISA Rule

SV-202028r395712_rule

Vulnerability Number

V-202028

Group Title

SRG-APP-000091

Rule Version

SRG-APP-000091-NDM-000223

Severity

CAT II

CCI(s)

• CCI-000172 - The information system generates audit records for the events defined in AU-2 d. with the content defined in AU-3.

Weight

10

Fix Recommendation

Configure the network device to generate audit records when successful/unsuccessful attempts to access privileges occur.

Check Contents

Determine if the network device generates audit records when successful/unsuccessful attempts to access privileges occur. If the network device does not generate audit records when successful/unsuccessful attempts to access privileges occur, this is a finding.

Vulnerability Number

V-202028

Documentable

False

Rule Version

SRG-APP-000091-NDM-000223

Severity Override Guidance

Determine if the network device generates audit records when successful/unsuccessful attempts to access privileges occur. If the network device does not generate audit records when successful/unsuccessful attempts to access privileges occur, this is a finding.

Check Content Reference

M

Target Key

2890

Comments