Check Point
TMA-CHECKPOINT-REMOTE-SYSLOG
Ensure logs are sent to a remote syslog server
中级别 1自动化checkpoint
说明
PASS requires at least one 'add syslog log-remote-address' entry. Audited against the Gaia clish 'show configuration' output.
检查方式
审计方法: 配置正则匹配
- 匹配模式
(?m)^add syslog log-remote-address \S+
修复方式
修复方法: 操作指南或基础设施补丁
add syslog log-remote-address 10.0.0.50 level info save config WebUI: System Management > System Logging > Remote System Logging.
属性
- 操作系统
- 任意
- 标签
- checkpointlogging
- 参考
- CIS Check Point Firewall Benchmark - Logging - Remote syslog server (verify section number for your Gaia release)
检查本机
请在您有权审计的机器上运行此命令。扫描为只读操作。
shell
tmaegis scan --target checkpoint