STIGQter: STIG Summary: Authentication, Authorization, and Accounting Services (AAA) Security Requirements Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2020:

AAA Services configuration audit records must identify what type of events occurred.

DISA Rule

SV-95567r1_rule

Vulnerability Number

V-80857

Group Title

SRG-APP-000095-AAA-000220

Rule Version

SRG-APP-000095-AAA-000220

Severity

CAT II

CCI(s)

• CCI-000130 - The information system generates audit records containing information that establishes what type of event occurred.

Weight

10

Fix Recommendation

Configure AAA Services audit records to identify what type of events occurred.

Check Contents

Verify AAA Services configuration audit records identify what type of events occurred.

If AAA Services configuration audit records do not identify what type of events occurred, this is a finding.

Vulnerability Number

V-80857

Documentable

False

Rule Version

SRG-APP-000095-AAA-000220

Severity Override Guidance

Verify AAA Services configuration audit records identify what type of events occurred.

If AAA Services configuration audit records do not identify what type of events occurred, this is a finding.

Check Content Reference

M

Target Key

3357

Comments