The DataPower Gateway must use automated mechanisms to alert security personnel to threats identified by authoritative sources (e.g., CTOs) and in accordance with CJCSM 6510.01B.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-65173	WSDP-NM-000131	SV-79663r1_rule		Medium

Description

By immediately displaying an alarm message, potential security violations can be identified more quickly even when administrators are not logged into the network device. An example of a mechanism to facilitate this would be through the utilization of SNMP traps.

STIG	Date
IBM DataPower Network Device Management Security Technical Implementation Guide	2017-10-05

Details

Check Text (C-65801r1_chk)

Go to Administration >> Access >> SNMP Settings. Verify the IP address, port, and security settings. Go to the Trap and Notification Targets tab. Verify the remote server/receiver information. If these values have not been set, this is a finding.

Fix Text (F-71113r1_fix)

Go to Administration >> Access >> SNMP Settings. Configure the IP address, port, and security settings.

Go to the Trap and Notification Targets tab. Enter the remote server/receiver information.