The firewall application must maintain an audit log of the following information and must disable all communication and generate an error event if the audit log becomes full:

1. (1) All changes to configuration of the firewall;
2. (2) All successful and unsuccessful connection attempts through the firewall; and

3. (3) The source and destination:

   1. (A) IP addresses;
   2. (B) Port numbers; and
   3. (C) MAC address.