STIGQter: STIG Summary: Symantec Edge SWG NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Edge SWG must generate an immediate real-time alert of all audit failure events requiring real-time alerts.

DISA Rule

SV-279266r1170696_rule

Vulnerability Number

V-279266

Group Title

SRG-APP-000360-NDM-000295

Rule Version

SYME-ND-000690

Severity

CAT II

CCI(s)

• CCI-001858 - Provide an alert in an organization-defined real-time-period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.

Weight

10

Fix Recommendation

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "event-log".
4. Enter "notifications".
5. Enter "default syslog enable".
6. Enter "default syslog level verbose".

Check Contents

1. Log in to the Edge SWG SSH CLI.
2. Enter "show event-log notifications".

Under "Account", if "Syslog" does not say "Enabled state: enabled", this is a finding.

Under "Account", if "Syslog" does not say "Event level: verbose", this is a finding.

Vulnerability Number

V-279266

Documentable

False

Rule Version

SYME-ND-000690

Severity Override Guidance

1. Log in to the Edge SWG SSH CLI.
2. Enter "show event-log notifications".

Under "Account", if "Syslog" does not say "Enabled state: enabled", this is a finding.

Under "Account", if "Syslog" does not say "Event level: verbose", this is a finding.

Check Content Reference

M

Target Key

5726