STIGQter: STIG Summary: Riverbed SteelHead CX v8 NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 25 Oct 2019:

Riverbed Optimization System (RiOS) must generate an email alert of all log failure events requiring alerts.

DISA Rule

SV-77391r1_rule

Vulnerability Number

V-62901

Group Title

SRG-APP-000360-NDM-000295

Rule Version

RICX-DM-000053

Severity

CAT II

CCI(s)

• CCI-001858 - The information system provides a real-time alert in an organization-defined real-time period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.

Weight

10

Fix Recommendation

Configure RiOS to generate an immediate real-time alert for all audit failure events requiring real-time alerts.

Navigate to the device Management Console
Navigate to Configure >> System Settings >> Email

Enter an SMTP Server name
Enter n SMTP Port number
Check "Report Events via Email" and enter at least one email address
Check "Report Failures via Email" and enter at least one email address

Check Contents

Verify that RiOS is configured to generate an immediate real-time alert for all audit failure events requiring real-time alerts.

Navigate to the device Management Console
Navigate to Configure >> System Settings >> Email

Verify that an SMTP Server is defined
Verify that an SMTP Port is defined
Verify that "Report Events via Email" is checked and that at least one email address is defined
Verify that "Report Failures via Email" is checked and that at least one email address is defined

If no email accounts are defined, this is a finding.

Vulnerability Number

V-62901

Documentable

False

Rule Version

RICX-DM-000053

Severity Override Guidance

Verify that RiOS is configured to generate an immediate real-time alert for all audit failure events requiring real-time alerts.

Navigate to the device Management Console
Navigate to Configure >> System Settings >> Email

Verify that an SMTP Server is defined
Verify that an SMTP Port is defined
Verify that "Report Events via Email" is checked and that at least one email address is defined
Verify that "Report Failures via Email" is checked and that at least one email address is defined

If no email accounts are defined, this is a finding.

Check Content Reference

M

Target Key

2931

Comments