Ensure Logging is enabled for Track Options of Global Properties

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify Logging is set to Log or Popup Alert or Mail Alert or SNMP Trap Alert for the following events SmartConsole > Global Properties > Log and Alert > Track Options VPN successful key exchange VPN packet handling errors VPN configuration & key exchange errors IP Options drop Administrative Notification Connection matched by SAM Dynamic object resolution failure Packet is incorrectly tagged Packet tagging brute force attack Verify Log every authenticated HTTP connection is enabled.

How it is fixed

Fix method: Guidance or infrastructure patch

SmartConsole > Global Properties > Log and Alert > Track Options: set Log (or Popup Alert, Mail Alert or SNMP Trap Alert) for VPN successful key exchange, VPN packet handling errors, VPN configuration & key exchange errors, IP Options drop, Administrative Notification, Connection matched by SAM, Dynamic object resolution failure, Packet is incorrectly tagged and Packet tagging brute force attack. Check Log every authenticated HTTP connection.