The Audit Trail report shows information about Firebox configuration changes. How can you make sure the Audit Trail report includes the names of the specific person that made each change? (Select one.)
A.
Enable the Logging > AuditTrack feature
B.
Create unique device administrator accounts for each Firebox administrative user
C.
Configure all Firebox administrators to use the Authentication Portal to log in to the Firebox
D.
Install the SSO Client on each computer used by Firebox administrators
E.
Configure your RADIUS server to send accounting messages to the Firebox
Fireware OS maintains an internal Audit Trail log that records every configuration change, administrative login, session logout, and failed authentication attempt. When multiple IT personnel share the default built-in administrative account (admin), all recorded changes in the Audit Trail report are attributed generically to admin, removing individual accountability.
To record the exact identity of the person implementing changes, the administrator must configure role-based access control by creating unique device administrator user accounts for each team member (under System > Users and Roles). These individual administrative accounts can be stored in the Firebox local database (Firebox-DB) or authenticated against external identity servers (such as Active Directory, RADIUS, or SecurID). When each administrator authenticates using their personal credentials to save changes in Policy Manager or Web UI, Fireware binds the user's specific username to the audit log event, ensuring individual traceability in the Audit Trail report.
[Reference: WatchGuard Network Security Essentials — Administration and Setup: Role-Based Administration, Device Administrator Accounts, and Configuration Audit Logging., ――――――――――――――――――――――――――――――――――――――――――――――――――――――――――]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit