STIGQter: STIG Summary: IBM DataPower Network Device Management Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Oct 2017:

The DataPower Gateway must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

DISA Rule

SV-79645r1_rule

Vulnerability Number

V-65155

Group Title

SRG-APP-000374-NDM-000299

Rule Version

WSDP-NM-000101

Severity

CAT II

CCI(s)

• CCI-001890 - The information system records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

Weight

10

Fix Recommendation

By default, the DataPower Gateway records time stamps for audit records in Coordinated Universal Time (UTC). The following is an example: March 30, 2015 followed by the number of milliseconds since January 1, 1970.

20150330T072434.296Z

Check Contents

In the web interface, go to Status >> View Logs >> Audit Log to display current time stamped log entries.

If the UTC format is not used, this is a finding.

Vulnerability Number

V-65155

Documentable

False

Rule Version

WSDP-NM-000101

Severity Override Guidance

In the web interface, go to Status >> View Logs >> Audit Log to display current time stamped log entries.

If the UTC format is not used, this is a finding.

Check Content Reference

M

Target Key

2861

Comments