Audits
Settings
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Theme
Light
Dark
Auto
Help
Plugins
Overview
Plugins Pipeline
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Release Notes
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Policies
Overview
Search
AWS Resources
Azure Resources
GCP Resources
Kubernetes Resources
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
CVEs
Overview
Newest
Search
Attack Path Techniques
Overview
Search
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Settings
Theme
Light
Dark
Auto
Detections
Plugins
Overview
Plugins Pipeline
Release Notes
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Policies
Overview
Search
AWS Resources
Azure Resources
GCP Resources
Kubernetes Resources
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
Analytics
CVEs
Overview
Newest
Search
Attack Path Techniques
Overview
Search
Audits
References
CCI
CCI-001858
CCI
CCI|CCI-001858
Title
The information system provides a real-time alert in an organization-defined real-time period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.
Reference Item Details
Reference:
CCI - DISA Control Correlation Identifier
Category:
2013
Audit Items
View all Reference Audit Items
Name
Plugin
Audit Name
3.092 - The system must generate an audit event when the audit log reaches a percentage of full threshold.
Windows
DISA Windows Vista STIG v6r41
AOSX-13-000310 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
Unix
DISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
Unix
DISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
Unix
DISA STIG Apple Mac OSX 10.15 v1r10
APPL-11-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
Unix
DISA STIG Apple macOS 11 v1r5
APPL-11-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
Unix
DISA STIG Apple macOS 11 v1r7
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
Unix
DISA STIG Apple macOS 12 v1r7
APPL-13-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
Unix
DISA STIG Apple macOS 13 v1r2
Big Sur - Configure Audit Failure Notification
Unix
NIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Configure Audit Failure Notification
Unix
NIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure Audit Failure Notification
Unix
NIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Configure Audit Failure Notification
Unix
NIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure Audit Failure Notification
Unix
NIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure Audit Failure Notification
Unix
NIST macOS Big Sur v1.4.0 - 800-53r5 Low
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - From-address
Cisco
DISA STIG Cisco ASA FW v1r4
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Logging Errors
Cisco
DISA STIG Cisco ASA FW v1r4
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Recipient-address
Cisco
DISA STIG Cisco ASA FW v1r4
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Severity
Cisco
DISA STIG Cisco ASA FW v1r4
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - smtp
Cisco
DISA STIG Cisco ASA FW v1r4
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging host
Cisco
DISA STIG Cisco ASA NDM v1r5
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging trap
Cisco
DISA STIG Cisco ASA NDM v1r5
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging host
Cisco
DISA STIG Cisco ASA VPN v1r2
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging trap
Cisco
DISA STIG Cisco ASA VPN v1r2
Catalina - Configure Audit Failure Notification
Unix
NIST macOS Catalina v1.5.0 - All Profiles
Catalina - Configure Audit Failure Notification
Unix
NIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Configure Audit Failure Notification
Unix
NIST macOS Catalina v1.5.0 - 800-53r5 Low
Catalina - Configure Audit Failure Notification
Unix
NIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Configure Audit Failure Notification
Unix
NIST macOS Catalina v1.5.0 - 800-171
Catalina - Configure Audit Failure Notification
Unix
NIST macOS Catalina v1.5.0 - 800-53r5 High
CISC-ND-001000 - The Cisco router must be configured to generate an alert for all audit failure events - logging host
Cisco
DISA STIG Cisco IOS-XR Router NDM v2r3
CISC-ND-001000 - The Cisco router must be configured to generate an alert for all audit failure events.
Cisco
DISA STIG Cisco IOS Router NDM v2r6
CISC-ND-001000 - The Cisco router must be configured to generate an alert for all audit failure events.
Cisco
DISA STIG Cisco IOS XE Router NDM v2r7
CISC-ND-001000 - The Cisco switch must be configured to generate an alert for all audit failure events.
Cisco
DISA STIG Cisco IOS Switch NDM v2r6
CISC-ND-001000 - The Cisco switch must be configured to generate an alert for all audit failure events.
Cisco
DISA STIG Cisco NX-OS Switch NDM v2r5
CISC-ND-001000 - The Cisco switch must be configured to generate an alert for all audit failure events.
Cisco
DISA STIG Cisco IOS XE Switch NDM v2r6
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.
IBM_DB2DB
DISA STIG IBM DB2 v10.5 LUW v2r1 Database
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.
Unix
DISA STIG IBM DB2 v10.5 LUW v2r1 OS Linux
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.
Windows
DISA STIG IBM DB2 v10.5 LUW v2r1 OS Windows
DKER-EE-003340 - Log aggregation/SIEM systems must be configured to notify SA and ISSO on Docker Engine - Enterprise audit failure events.
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix v2r1
EP11-00-008100 - The EDB Postgres Advanced Server must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.
PostgreSQLDB
EDB PostgreSQL Advanced Server v11 DB Audit v2r2
FGFW-ND-000115 - The FortiGate device must generate an immediate real-time alert of all audit failure events requiring real-time alerts.
FortiGate
DISA Fortigate Firewall NDM STIG v1r4
FNFG-FW-000105 - If communication with the central audit server is lost, the FortiGate firewall must generate a real-time alert to, at a minimum, the SCA and ISSO.
FortiGate
DISA Fortigate Firewall STIG v1r3
JUNI-ND-000990 - The Juniper router must be configured to generate an alert for all audit failure events.
Juniper
DISA STIG Juniper Router NDM v2r3
MADB-10-007500 - MariaDB must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.
MySQLDB
DISA MariaDB Enterprise 10.x v1r2 DB
MD3X-00-000040 - MongoDB must provide audit record generation for DoD-defined auditable events within all DBMS/database components.
Unix
DISA STIG MongoDB Enterprise Advanced 3.x v2r1 OS
MD4X-00-000100 - MongoDB must provide audit record generation for DoD-defined auditable events within all DBMS/database components.
Unix
DISA STIG MongoDB Enterprise Advanced 4.x v1r2 OS
Monterey - Configure Audit Failure Notification
Unix
NIST macOS Monterey v1.0.0 - 800-53r5 Moderate
Monterey - Configure Audit Failure Notification
Unix
NIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Configure Audit Failure Notification
Unix
NIST macOS Monterey v1.0.0 - All Profiles
MYS8-00-009900 - The MySQL Database Server 8.0 must provide an immediate real-time alert to appropriate support staff of all audit log failures.
MySQLDB
DISA Oracle MySQL 8.0 v1r4 DB