STIGQter STIGQter: STIG Summary: IBM DataPower Network Device Management Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Oct 2017: The DataPower Gateway must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

DISA Rule

SV-79645r1_rule

Vulnerability Number

V-65155

Group Title

SRG-APP-000374-NDM-000299

Rule Version

WSDP-NM-000101

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

By default, the DataPower Gateway records time stamps for audit records in Coordinated Universal Time (UTC). The following is an example: March 30, 2015 followed by the number of milliseconds since January 1, 1970.

20150330T072434.296Z

Check Contents

In the web interface, go to Status >> View Logs >> Audit Log to display current time stamped log entries.

If the UTC format is not used, this is a finding.

Vulnerability Number

V-65155

Documentable

False

Rule Version

WSDP-NM-000101

Severity Override Guidance

In the web interface, go to Status >> View Logs >> Audit Log to display current time stamped log entries.

If the UTC format is not used, this is a finding.

Check Content Reference

M

Target Key

2861

Comments