STIGQter STIGQter: STIG Summary: Akamai KSD Service Impact Level 2 NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 12 Sep 2017:

The Akamai Luna Portal must automatically audit account modification.

DISA Rule

SV-91161r1_rule

Vulnerability Number

V-76465

Group Title

SRG-APP-000027-NDM-000209

Rule Version

AKSD-DM-000009

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Enable account modification alerting:

1. Log in to the Luna Portal as an administrator.
2. Select Configure >> Alerts.
3. Search/filter for "Luna Control Center Event".
4. Click the "Settings" button and click on "Properties" tab.
5. Select "Manage - Manage Users".

Check Contents

Verify that the portal is sending Luna Event notifications:

1. Log in to the Luna Portal as an administrator.
2. Select Configure >> Alerts.
3. Search/filter for "Luna Control Center Event".
4. Click the "Settings" button and click on "Properties" tab.
5. Verify that the following setting is selected: "Manage - Manage Users".

If the Luna Control Center event notifications are not enabled, this is a finding.

Vulnerability Number

V-76465

Documentable

False

Rule Version

AKSD-DM-000009

Severity Override Guidance

Verify that the portal is sending Luna Event notifications:

1. Log in to the Luna Portal as an administrator.
2. Select Configure >> Alerts.
3. Search/filter for "Luna Control Center Event".
4. Click the "Settings" button and click on "Properties" tab.
5. Verify that the following setting is selected: "Manage - Manage Users".

If the Luna Control Center event notifications are not enabled, this is a finding.

Check Content Reference

M

Target Key

3167

Comments