The network device must generate an immediate alert when allocated audit record storage volume reaches 75% of repository maximum audit record storage capacity.

From Network Device Management Security Requirements Guide

Associated with: CCI-001855

SV-69323r1_rule The network device must generate an immediate alert when allocated audit record storage volume reaches 75% of repository maximum audit record storage capacity.

Vulnerability discussion

If security personnel are not notified immediately upon storage volume utilization reaching 75%, they are unable to plan for storage capacity expansion. This could lead to the loss of audit information. Note that while the network device must generate the alert, notification may be done by a management server.

Check content

Determine if the network device generates an immediate alert when allocated audit record storage volume reaches 75% of repository maximum audit record storage capacity. This requirement may be verified by configuration review or validated test results. If an immediate alert is not generated when allocated audit record storage volume reaches 75% of repository maximum audit record storage capacity, this is a finding.

Fix text

Configure the network device to generate an immediate alert when allocated audit record storage volume reaches 75% of repository maximum audit record storage capacity.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.