STIGQter STIGQter: STIG Summary: Trend Micro Deep Security 9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2016:

Trend Deep Security must alert the ISSO and SA (at a minimum) in the event of an audit processing failure.

DISA Rule

SV-80375r1_rule

Vulnerability Number

V-65885

Group Title

SRG-APP-000108

Rule Version

TMDS-00-000085

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Trend Deep Security server to alert the ISSO and SA (at a minimum) in the event of an audit processing failure.

Go to Administration >> System Settings >> System Events, and set the following settings to “Forward.”

0 Unknown Error
266 Warnings/Errors Cleared
609 User Made Invalid Request
740 Agent/Appliance Error
801 Error Dismissed
913 Automatic Diagnostic Package Error
923 Usage Information Package Error
997 Tagging Error
998 System Event Notification Error
999 Internal Software Error
1677 Trusted Platform Module Error

Check Contents

Review the Trend Deep Security server configuration to ensure the ISSO and SA (at a minimum) are alerted in the event of an audit processing failure.

Verify any audit processing failure events within Administration >> System Settings >> System Events, are set to “Forward”

If these settings are not set to “Forward”, this is a finding.

Vulnerability Number

V-65885

Documentable

False

Rule Version

TMDS-00-000085

Severity Override Guidance

Review the Trend Deep Security server configuration to ensure the ISSO and SA (at a minimum) are alerted in the event of an audit processing failure.

Verify any audit processing failure events within Administration >> System Settings >> System Events, are set to “Forward”

If these settings are not set to “Forward”, this is a finding.

Check Content Reference

M

Target Key

2955

Comments