← Back to IBM DataPower Network Device Management Security Technical Implementation Guide

V-65173

CAT II (Medium)

The DataPower Gateway must use automated mechanisms to alert security personnel to threats identified by authoritative sources (e.g., CTOs) and in accordance with CJCSM 6510.01B.

Rule ID

SV-79663r1_rule

STIG

IBM DataPower Network Device Management Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000366, CCI-001274

Discussion

By immediately displaying an alarm message, potential security violations can be identified more quickly even when administrators are not logged into the network device. An example of a mechanism to facilitate this would be through the utilization of SNMP traps.

Check Content

Go to Administration >> Access >> SNMP Settings. Verify the IP address, port, and security settings. Go to the Trap and Notification Targets tab. Verify the remote server/receiver information. If these values have not been set, this is a finding.

Fix Text

Go to Administration >> Access >> SNMP Settings. Configure the IP address, port, and security settings. 

Go to the Trap and Notification Targets tab. Enter the remote server/receiver information.