ATM_ID: B2B81368-53A2-11EA-9805-9BD3993DCDB4

MFF:

PLANNEDTIMESTAFF:

ID: WFAST_Accounting/Testcases/FS_50.001.01_Audit_Log_Events/10762

TESTCASE_HEADLINE: Event ID=184
To verify that an audit log event 184 shall be captured whenever system administrator has disabled the SFTP browse option via SNMP/Remotely.

(1. Open Access should be enabled in CWIS for Non-Logged in user.
2. Test procedure should be performed through Guest User only)

GROUP:

FEATURE:

SUB_FEATURE:

INPUT: <p>Overall Precondition:1. FTP/SFTP Browse Feature should be enabled in the CWIS -- Properties -- Scan To -- Security -- FTP and SFTP browsing enablement.2. Domain/Workgroup should be configured in the Server.3. Create a Multiple FTP and SFTP share's path with Read/Write Access.<br />
(Note:1. Need to Test With Individual user and group of user2. With share folder/path Read and Write Permission)4. Create a Directory structure with sub directories in the workgroup destination computer path1. SFTP Browse should be Enabled in the device.</p><p>Syslog:<br />
</p>
<ol><li value="1">Syslog Destination Server details must be configured.</li></ol>

PROCEDURE: <p></p>
<ol><li value="1">Browse the Device WebUI.<br />
</li><li value="2">Go to -- Apps -- Scan To -- Security.<br />
</li><li value="3">Disable -- SFTP Browse.<br />
</li><li value="4">Download and Review the Audit Log event.</li></ol>

OUTPUT: <p></p><p>An audit log event 184 should be captured whenever system administrator has disabled the SFTP browse option via SNMP/Remotely.</p><p>Event ID:184<br />
SFTP Browse Configuration<br />
User Name<br />
Device Name<br />
Device Serial Number<br />
Completion Status (Configured | Enabled | Disabled)</p><p><br />
Sys log Verfication using View Events option:</p><p>Syslog+CEF format shoud be displayed as per the Spec (Refer SIEM Integration and Audit Log Events Spec):</p><p>PRI number; Timestamp; Device name; CEF:0; Xerox; Device Model; Device Software Version; Device Audit log Event ID; Audti log Event Description; Severity)along with CEF Key Name Mapping.</p>

PROCESS:

PRIORITY:

TEST_TYPE: automated

LOE:

RESOURCE_HW:

RESOURCE_CONSUMEABLES:

RESOURCE_MEDIA:

SKILL_SET:

TEST_CASE_TYPE: testcases

TESTCASE_SOURCE:

SPEC: FS 50.001 Audit Log Events

SPEC_VERSION: 18

SPEC_TAG: 50.001.01.188

ATM_OWNER:

APPROVE_QE:

APPROVED_QE:

APPROVE_SE:

APPROVED_SE:

APPROVE_SPAR:

APPROVED_SPAR:

ASSOCIATED_TESTCASES:

TRAINING:

TESTCASE_VERSION:

TESTCASE_STATE:

TESTCASE_PLATFORM:

TESTCASE_PRODUCT: canyon, carroll, corvo, corrib, kiska, malawi, mystic, melody, muckross

TESTCASE_APPROVALS:

CDATE: 1582176883

MDATE: 1582176883

MUSER: q4BVX0J1

AUTHOR: q4BVX0J1

ATM_MCOMMENTS: Imported from spreadsheet

HISTORY:

ATM_LOCKED:

ATM_REQLINK: 4379EF88-97F7-11E9-9925-CFADAA3FCFED

ATM_REQCOUNT: 1

QA_TEAM:

TC_WEIGHTAGE:

FILENAME:

FILEDESC:

FILES:

RELEASE:

AUTOMATION_GROUP:

TC_WORK_LOCATION_CAT: work_from_home_tc

DEVICE_CATEGORY: mfp

CONSTRAINTS_DAR: Imp_98 . NA  Done By Previous Analysis

COMPETENCY: wfast_accounting

APTEST_TRACKING: yes

COMPLEXITY_OUTPUT_VALIDATION: non_outliers

AUTOMATION_CANDIDATE: yes

AUTOMATABLE: yes

SRT_ANALYZATION: analyzed