STIGQter: STIG Summary: HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 28 Jul 2017:

The storage system must allocate audit record storage capacity to store at least one weeks worth of audit records, when audit records are not immediately sent to a central audit record storage facility.

DISA Rule

SV-85135r1_rule

Vulnerability Number

V-70513

Group Title

SRG-OS-000341-GPOS-00132

Rule Version

HP3P-32-001700

Severity

CAT II

CCI(s)

• CCI-001849 - The organization allocates audit record storage capacity in accordance with organization-defined audit record storage requirements.

Weight

10

Fix Recommendation

Configure the audit logging capacity for the maximum storage value by entering the command:

cli% setsys EventLogSize 4M

Check Contents

Verify the logging capacity is set to the maximum value of "4", with the following command:

cli% showsys -param

If the resulting list of configured parameters and values, does not contain "EventLogSize : 4M", this is a finding.

Vulnerability Number

V-70513

Documentable

False

Rule Version

HP3P-32-001700

Severity Override Guidance

Verify the logging capacity is set to the maximum value of "4", with the following command:

cli% showsys -param

If the resulting list of configured parameters and values, does not contain "EventLogSize : 4M", this is a finding.

Check Content Reference

M

Target Key

3013

Comments