TMAegis
Više pravila za checkpoint

TMA-CHECKPOINT-2.6.1

Ensure mgmtauditlogs is set to on

SrednjaNivo 1Automatskacheckpoint

Opis

The mgmtauditlogs specifies if the Gaia sends the Gaia audit logs (for configuration changes that authorized users make) to a Check Point Management Server. PASS requires set syslog mgmtauditlogs on. Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac
(?m)^set syslog mgmtauditlogs on[ \t]*$

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

set syslog mgmtauditlogs on save config # CIS guidance: Run the following command to enable the mgmtauditlogs. CLI: set syslog mgmtauditlogs on GUI: Navigate to System Management > System Logging > System Logging checked the Send audit logs to management server upon successful configuration

Svojstva

Operativni sistemi
Bilo koji
Oznake
checkpointlogging
Referenca
CIS Check Point Firewall Benchmark v1.1.0 - 2.6.1 Ensure mgmtauditlogs is set to on

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target checkpoint