II - Mission Support Classified
Rules and Groups employed by this XCCDF Profile
-
The Juniper SRX Services Gateway Firewall must generate audit records when unsuccessful attempts to access security zones occur.
Without generating log records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an inci...Rule Medium Severity -
SRG-NET-000333-ALG-000049
Group -
The Juniper SRX Services Gateway Firewall must be configured to support centralized management and configuration of the audit log.
Without the ability to centrally manage the content captured in the audit records, identification, troubleshooting, and correlation of suspicious behavior would be difficult and could lead to a del...Rule Medium Severity -
SRG-NET-000089-ALG-000055
Group -
In the event that communications with the Syslog server is lost, the Juniper SRX Services Gateway must continue to queue traffic log records locally.
It is critical that when the network element is at risk of failing to process audit logs as required, it take action to mitigate the failure. Audit processing failures include: software/hardware er...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.