The DataPower Gateway must off-load audit records onto a different system or media than the system being audited.
An XCCDF Rule
Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.
- ID
- SV-79661r1_rule
- Version
- WSDP-NM-000128
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Use the CLI copy command. Syntax: copy -f sourceURL destinationURL
-f is an optional switch that forces an unconditional copy. Example: xi52(config)# copy audit:audit-log sftp://test@xx.xx.x.xxx/LOGS/x/Week1.log.
Or, go to Administration-Miscellaneous >> Manage Log Targets, Event Subscription Tab, provide a name, press Add, choose Category “audit”.
Go to Main tab, choose protocol (NFS, SMTP, SNMP, File, etc.) and configure.