Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Juniper SRX Services Gateway must generate log records when successful attempts to configure the device and use commands occur.
Description
Discussion Text
Without generating log records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
While the Juniper SRX inherently has the capability to generate log records, by default only the high facility levels are captured by default to local files.
Ensure at least one Syslog server and local files are configured to support requirements. However, the Syslog itself must also be configured to filter event records so it is not overwhelmed. A best practice when configuring the external Syslog server is to add similar log-prefixes to the log file names to help and researching of central Syslog server. Another best practice is to add a match condition to limit the recorded events to those containing the regular expression (REGEX).
While the Juniper SRX inherently has the capability to generate log records, by default only the high facility levels are captured by default to local files.
Ensure at least one Syslog server and local files are configured to support requirements. However, the Syslog itself must also be configured to filter event records so it is not overwhelmed. A best practice when configuring the external Syslog server is to add similar log-prefixes to the log file names to help and researching of central Syslog server. Another best practice is to add a match condition to limit the recorded events to those containing the regular expression (REGEX).
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.