| Checked | Name | Title |
|---|
| ☐ | SV-239873r665932_rule | The Cisco ASA must be configured to produce audit records containing sufficient information to establish what type of event occurred. |
| ☐ | SV-239874r682908_rule | The Cisco ASA must be configured to produce audit records containing information to establish when the events occurred. |
| ☐ | SV-239875r665938_rule | The Cisco ASA must be configured to produce audit records containing information to establish where the event was detected. |
| ☐ | SV-239876r665941_rule | The Cisco ASA must be configured to produce audit records containing information to establish the source of the event. |
| ☐ | SV-239877r665944_rule | The Cisco ASA must be configured to produce audit records containing information to establish the outcome of events associated with detected harmful or potentially harmful traffic. |
| ☐ | SV-239878r665947_rule | The Cisco ASA must be configured to log events based on policy access control rules, signatures, and anomaly analysis. |
| ☐ | SV-239879r856155_rule | The Cisco ASA must be configured to off-load log records to a centralized log server. |
| ☐ | SV-239880r665953_rule | The Cisco ASA must be configured to send log records to the syslog server for specific facility and severity level. |
| ☐ | SV-239881r665956_rule | The Cisco ASA must be configured to queue log records locally In the event that the central audit server is down or not reachable. |
| ☐ | SV-239882r991802_rule | The Cisco ASA must be configured to block outbound traffic containing denial-of-service (DoS) attacks by ensuring an intrusion prevention policy has been applied to outbound communications traffic. |
| ☐ | SV-239883r665962_rule | The Cisco ASA must be configured to use Advanced Malware Protection (AMP) features to detect and block the transmission of malicious software and malware. |
| ☐ | SV-239884r665965_rule | The Cisco ASA must block any prohibited mobile code at the enclave boundary when it is detected. |
| ☐ | SV-239885r1016324_rule | The Cisco ASA must be configured to install updates for signature definitions and vendor-provided rules. |
| ☐ | SV-239886r665971_rule | The Cisco ASA must be configured to block malicious code. |
| ☐ | SV-239887r665974_rule | The Cisco ASA must be configured to block traffic from IP addresses that have a known bad reputation based on the latest reputation intelligence. |
| ☐ | SV-239888r665977_rule | The Cisco ASA must be configured to send an alert to organization-defined personnel and/or the firewall administrator when malicious code is detected. |
| ☐ | SV-239889r1016325_rule | The Cisco ASA must be configured to automatically install updates to signature definitions and vendor-provided rules. |
| ☐ | SV-239890r856156_rule | The Cisco ASA must be configured to block inbound traffic containing unauthorized activities or conditions. |
| ☐ | SV-239891r856157_rule | The Cisco ASA must be configured to block outbound traffic containing unauthorized activities or conditions. |
| ☐ | SV-239892r971533_rule | The Cisco ASA must be configured to send an alert to organization-defined personnel and/or the firewall administrator when intrusion events are detected. |
| ☐ | SV-239893r971533_rule | The Cisco ASA must be configured to send an alert to organization-defined personnel and/or the firewall administrator when threats are detected. |
| ☐ | SV-239894r971533_rule | The Cisco ASA must be configured to send an alert to organization-defined personnel and/or the firewall administrator when DoS incidents are detected. |
| ☐ | SV-239895r971533_rule | The Cisco ASA must generate an alert to organization-defined personnel and/or the firewall administrator when active propagation of malware or malicious code is detected. |
STIGQter: STIG Summary: