STIGQter: STIG Summary: IBM DataPower Network Device Management Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Oct 2017:

The DataPower Gateway must employ automated mechanisms to assist in the tracking of security incidents.

DISA Rule

SV-79675r1_rule

Vulnerability Number

V-65185

Group Title

SRG-APP-000516-NDM-000342

Rule Version

WSDP-NM-000140

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000833 - The organization employs automated mechanisms to assist in the tracking of security incidents.

Weight

10

Fix Recommendation

Go to Administration >> Miscellaneous >> Manage Log Targets. Click the log target or add one. Go to the Event Subscriptions tab and click on the event categories that are required to be audited.

Check Contents

Go to Administration >> Miscellaneous >> Manage Log Targets. Verify the log target. If no log target exists, this is a finding.

Vulnerability Number

V-65185

Documentable

False

Rule Version

WSDP-NM-000140

Severity Override Guidance

Go to Administration >> Miscellaneous >> Manage Log Targets. Verify the log target. If no log target exists, this is a finding.

Check Content Reference

M

Target Key

2861

Comments