Ensure Logging is enabled for Track Options of Global Properties

中等級 1人工審核checkpoint

說明

This defines the system-wide logging and alerting of parameters.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Verify Logging is set to Log or Popup Alert or Mail Alert or SNMP Trap Alert for the following events SmartConsole > Global Properties > Log and Alert > Track Options VPN successful key exchange VPN packet handling errors VPN configuration & key exchange errors IP Options drop Administrative Notification Connection matched by SAM Dynamic object resolution failure Packet is incorrectly tagged Packet tagging brute force attack Verify Log every authenticated HTTP connection is enabled.

修補方式

修補方法: 操作指南或基礎設施修補檔

SmartConsole > Global Properties > Log and Alert > Track Options: set Log (or Popup Alert, Mail Alert or SNMP Trap Alert) for VPN successful key exchange, VPN packet handling errors, VPN configuration & key exchange errors, IP Options drop, Administrative Notification, Connection matched by SAM, Dynamic object resolution failure, Packet is incorrectly tagged and Packet tagging brute force attack. Check Log every authenticated HTTP connection.

屬性

作業系統: 不限
標籤: checkpointlogging
參考資料: CIS Check Point Firewall Benchmark v1.1.0 - 3.20 Ensure Logging is enabled for Track Options of Global Properties