The ALG must off-load audit records onto a centralized log server.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-204995
SRG-NET-000334-ALG-000050
SV-204995r831372_rule
Medium
Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
Off-loading is a common process in information systems with limited audit storage capacity.
This does not apply to audit logs generated on behalf of the device itself (management).