AAA Services must be configured to send audit records to a centralized audit server.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-204690SRG-APP-000358-AAA-000280SV-204690r961395_ruleCCI-001851medium
Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.
STIGDate
AAA Services Security Requirements Guide2024-12-04

Related Frameworks

2 paths across 2 frameworks
NIST 800-531 mapping
  • DISA · V2R2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-001851
1.00
  • DISA · V2R2 · disa_xccdf · related

Details

Check Text (C-204690r961395_chk)

Verify AAA Services are configured to send audit records to a centralized audit server. If AAA Services are not configured to send audit records to a centralized audit server, this is a finding.

Fix Text (F-4813r389352_fix)

Configure AAA Services to send audit records to a centralized audit server.