17.9.2 (L1) Ensure 'Audit Other System Events' is set to 'Success and Failure' (Automated)
System_AuditOtherSystemEvents
This policy setting allows you to audit any of the following events: Startup and shutdown of the Windows Firewall service and driver. Security policy processing by the Windows Firewall Service. Cryptography key file and migration operations.
./Device/Vendor/MSFT/Policy/Config/Audit/System_AuditOtherSystemEvents
Format: int Value: 3
Audit event on success and failure.
YES
Auditing
Audit Other System Events
Previous17.9.1 (L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure' (Automated)Next17.9.3 (L1) Ensure 'Audit Security State Change' is set to include 'Success' (Automated)
Last updated