Standards Group:
YALE-MSS-12: Intrusion Detection
YALE-MSS-12.1: Capture inbound and outbound network flow data
Low Risk Endpoint
Not Required
Moderate Risk Endpoint
Not Required
High Risk Endpoint
Required for IA
Low Risk Server
Required for IA
Moderate Risk Server
Upcoming
Required for IA
High Risk Server
Upcoming
Required for IA
Low Risk Mobile Device
Not Required
Moderate Risk Mobile Device
Not Required
High Risk Mobile Device
Not Required
Low Risk Network Printer
Required for IA
Moderate Risk Network Printer
Upcoming
Required for IA
High Risk Network Printer
Upcoming
Required for IA
Details
Capture inbound and outbound network flow data that includes the following elements: time stamp, IP addresses of source and destination, Network protocol and port, duration of the flow, bytes.