Check Point
TMA-CHECKPOINT-REMOTE-SYSLOG
Ensure logs are sent to a remote syslog server
中等級 1自動化checkpoint
說明
PASS requires at least one 'add syslog log-remote-address' entry. Audited against the Gaia clish 'show configuration' output.
檢查方式
稽核方法: 設定正規表示式
- 比對模式
(?m)^add syslog log-remote-address \S+
修補方式
修補方法: 操作指南或基礎設施修補檔
add syslog log-remote-address 10.0.0.50 level info save config WebUI: System Management > System Logging > Remote System Logging.
屬性
- 作業系統
- 不限
- 標籤
- checkpointlogging
- 參考資料
- CIS Check Point Firewall Benchmark - Logging - Remote syslog server (verify section number for your Gaia release)
檢查此主機
請在您有權稽核的機器上執行此指令。掃描為唯讀操作。
shell
tmaegis scan --target checkpoint