Ensure Anti-DDoS access and security log service is enabled

MediaNivel 2Revisión manualalibaba

Descripción

Alibaba Cloud Anti-DDoS Pro supports integration with Log Service for website access log (including HTTP flood attack logs) to enable the real-time analysis and reporting center features. The log collected can be monitored on a central dashboard on Log Service. By integrating Anti-DDoS access and security log to Log Service, the website access log and flood attack logs can be collected and monitored to enable real-time query and improve the network security. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Perform the following ensure the Anti-DDoS access and security log is enabled: 1. Logon to Anti-DDoS Pro Console, and go to the Log > Full Log page. 2. Select the specific website. 3. Ensure the Log Collection is turned on. 4. Ensure the log volume usage indicator is sufficient for log storage.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Perform the following ensure the Anti-DDoS access and security log is enabled: 1. Logon to Anti-DDoS Pro Console, and go to the Log > Full Log page. 2. Select the specific website for which you want to enable the Full Log service and click to turn on the Status switch.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: alibabalogging
Referencia: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 2.6 Ensure Anti-DDoS access and security log service is enabled