Ensure Anti-DDoS access and security log service is enabled

MittelStufe 2Manuelle Prüfungalibaba

Beschreibung

Alibaba Cloud Anti-DDoS Pro supports integration with Log Service for website access log (including HTTP flood attack logs) to enable the real-time analysis and reporting center features. The log collected can be monitored on a central dashboard on Log Service. By integrating Anti-DDoS access and security log to Log Service, the website access log and flood attack logs can be collected and monitored to enable real-time query and improve the network security. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Perform the following ensure the Anti-DDoS access and security log is enabled: 1. Logon to Anti-DDoS Pro Console, and go to the Log > Full Log page. 2. Select the specific website. 3. Ensure the Log Collection is turned on. 4. Ensure the log volume usage indicator is sufficient for log storage.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Perform the following ensure the Anti-DDoS access and security log is enabled: 1. Logon to Anti-DDoS Pro Console, and go to the Log > Full Log page. 2. Select the specific website for which you want to enable the Full Log service and click to turn on the Status switch.

Eigenschaften

Betriebssysteme: Beliebig
Tags: alibabalogging
Referenz: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 2.6 Ensure Anti-DDoS access and security log service is enabled