STIGQter: STIG Summary: IBM DataPower Network Device Management Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Oct 2017:

The DataPower Gateway must generate audit log events for a locally developed list of auditable events.

DISA Rule

SV-79665r1_rule

Vulnerability Number

V-65175

Group Title

SRG-APP-000516-NDM-000334

Rule Version

WSDP-NM-000132

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Go to Administration >> Miscellaneous >> Manage Log Targets. Click the log target or add one.

Go to the Event Subscriptions tab and click on the event categories that are required to be audited.

Check Contents

Go to Administration >> Miscellaneous >> Manage Log Targets. Verify the settings. If they are blank, this is a finding.

Vulnerability Number

V-65175

Documentable

False

Rule Version

WSDP-NM-000132

Severity Override Guidance

Go to Administration >> Miscellaneous >> Manage Log Targets. Verify the settings. If they are blank, this is a finding.

Check Content Reference

M

Target Key

2861

Comments