STIGQter: STIG Summary: Trend Micro TippingPoint NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Apr 2025:

The TippingPoint SMS must generate audit records when successful/unsuccessful logon attempts occur.

DISA Rule

SV-242253r961824_rule

Vulnerability Number

V-242253

Group Title

SRG-APP-000503-NDM-000320

Rule Version

TIPP-NM-000520

Severity

CAT III

CCI(s)

• CCI-000172 - Generate audit records for the event types defined in AU-2 c that include the audit record content defined in AU-3.

Weight

10

Fix Recommendation

In the SMS client, ensure the remote system is configured to generate all audit records.

1. Navigate to Admin >> Server properties >> Syslog >> New.
2. Click enable.
3. Click TCP (required for DoD).
4. Under Log Type, select "Device Audit".
5. Facility is "Log Audit".
6. Timestamp: SMS Current Time.
7. Check "Include SMS hostname in Header".
8. Click OK.
9. Repeat these steps for the following three other Log Types: Device System, SMS Audit, and SMS System.

Check Contents

In the SMS client, ensure the remote system is configured to generate all audit records.

1. Navigate to Admin >> Server properties >> Syslog.
2. Verify the configuration enables TCP.
3. Verify Device Audit, Device System, SMS Audit, and SMS System log types are enabled and configured.

If syslog is not configured to use TCP or does not include the four log types, this is a finding.

Vulnerability Number

V-242253

Documentable

False

Rule Version

TIPP-NM-000520

Severity Override Guidance

In the SMS client, ensure the remote system is configured to generate all audit records.

1. Navigate to Admin >> Server properties >> Syslog.
2. Verify the configuration enables TCP.
3. Verify Device Audit, Device System, SMS Audit, and SMS System log types are enabled and configured.

If syslog is not configured to use TCP or does not include the four log types, this is a finding.

Check Content Reference

M

Target Key

5369