Check: AKSD-DM-000011
Akamai KSD Service Impact Level 2 NDM STIG:
AKSD-DM-000011
(in version v1 r1)
Title
The Akamai Luna Portal must automatically audit account removal actions. (Cat II impact)
Discussion
Account management, as a whole, ensures access to the network device is being controlled in a secure manner by granting access to only authorized personnel. Auditing account removal actions will support account management procedures. When device management accounts are terminated, user or service accessibility may be affected. Auditing also ensures authorized active accounts remain enabled and available for use when required.
Check Content
Verify that the portal is sending Luna Event notifications: 1. Log in to the Luna Portal as an administrator. 2. Select Configure >> Alerts. 3. Search/filter for "Luna Control Center Event". 4. Click the "Settings" button and click on "Properties" tab. 5. Verify that the following setting is selected: "Manage - Manage Users". If the Luna Control Center event notifications are not enabled, this is a finding.
Fix Text
Enable account removal alerting: 1. Log in to the Luna Portal as an administrator. 2. Select Configure >> Alerts. 3. Search/filter for "Luna Control Center Event". 4. Click the "Settings" button and click on "Properties" tab. 5. Select "Manage - Manage Users".
Additional Identifiers
Rule ID: SV-91163r1_rule
Vulnerability ID: V-76467
Group Title: SRG-APP-000029-NDM-000211
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001405 |
The information system automatically audits account removal actions. |
Controls
Number | Title |
---|---|
AC-2 (4) |
Automated Audit Actions |