TMA-CHECKPOINT-3.8
Logging should be enable for all Firewall Rules
MediumLevel 2Manual reviewcheckpoint
Description
The Track Field defines how the events of the rule are captured.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify all Track field in all firewall rules should have set to Log.
How it is fixed
Fix method: Guidance or infrastructure patch
Set the Track field to Log in all firewall rules.
Properties
- Operating systems
- Any
- Tags
- checkpointlogging
- Reference
- CIS Check Point Firewall Benchmark v1.1.0 - 3.8 Logging should be enable for all Firewall Rules