STIGQter STIGQter: STIG Summary: Fortinet FortiGate Firewall NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 05 Jan 2026:

The FortiGate device must audit the execution of privileged functions.

DISA Rule

SV-234167r961362_rule

Vulnerability Number

V-234167

Group Title

SRG-APP-000343-NDM-000289

Rule Version

FGFW-ND-000040

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

This fix can be performed on the FortiGate GUI or on the CLI.
Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:

# config log eventfilter
# set event enable
# set system enable
# end

Check Contents

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration log eventfilter | grep -i 'event\|system'

The output should be:
set event enable
set system enable

If the event and system parameters are set to disable, this is a finding.

Vulnerability Number

V-234167

Documentable

False

Rule Version

FGFW-ND-000040

Severity Override Guidance

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration log eventfilter | grep -i 'event\|system'

The output should be:
set event enable
set system enable

If the event and system parameters are set to disable, this is a finding.

Check Content Reference

M

Target Key

5260