Check Point
TMA-CHECKPOINT-REMOTE-SYSLOG
Ensure logs are sent to a remote syslog server
SedangLevel 1Otomatischeckpoint
Deskripsi
PASS requires at least one 'add syslog log-remote-address' entry. Audited against the Gaia clish 'show configuration' output.
Cara pemeriksaan
Metode audit: Pola konfigurasi
- Pola
(?m)^add syslog log-remote-address \S+
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
add syslog log-remote-address 10.0.0.50 level info save config WebUI: System Management > System Logging > Remote System Logging.
Properti
- Sistem operasi
- Apa saja
- Tag
- checkpointlogging
- Referensi
- CIS Check Point Firewall Benchmark - Logging - Remote syslog server (verify section number for your Gaia release)
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target checkpoint