IL2 (Deter) Controls
Report and Alert on Critical console messages from boundary devices
Report and Alert on Authentication failures on boundary devices and systems
Report and Alert on suspected Attacks at the boundary
Report on Error console messages from boundary devices
Report on User sessions on boundary devices and consoles
Report on Changes to Firewall and boundary device rule base
Report on Changes to Firewall and boundary device rule base in response to a detected Attack
Report on Status Change to security software monitoring tools, such as your Security Incident and Event Management, Intrusion Detection Software