Ensure Security Center Network, Host and Security log analysis is enabled

中级别 2人工审核alibaba

说明

Log Service collects log entries of Security Center for security logs, network logs, and host logs, with 14 subtypes, including 1. Security logs a. Vulnerability logs b. Baseline logs c. Security alerting logs 2. Security logs a. Vulnerability logs b. Baseline logs c. Security alerting logs 3. Network logs a. The Security Center log shall be enabled to collect and store real-time security log, network log and server log to better protect your assets in real time. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

修复方式

修复方法: 操作指南或基础设施补丁

Perform the following ensure the Cloud Firewall access and security log is enabled: 1. Logon to Security Center Console. 2. In the left-side navigation pane, select Investigation > Log Analysis to enter the Activate Log Analysis page. 3. Click Active Now on the Activate log Analysis page. 4. On the Purchase page, check Full Log and configure some other settings as needed. 5. Click Purchase Now. 6. In the Activate log Analysis click Activate log Analysis to complete the authorization. 7. In the log type menu, check the log types to enable the log collection.

属性

操作系统: 任意
标签: alibabalogging
参考: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 2.9 Ensure Security Center Network, Host and Security log analysis is enabled