NET1021 - The network element must log all messages except debugging - 'Logging buffered'

Information

The network device must log all messages except debugging and send all log data to a syslog server.

Logging is a critical part of router security. Maintaining an audit trail of system activity logs (syslog) can help identify configuration errors, understand past intrusions, troubleshoot service disruptions, and react to probes and scans of the network. Syslog levels 0-6 are the levels required to collect the necessary information to help in the recovery process.

Solution

Configure the network device to log all messages except debugging and send all log data to a syslog server.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_L2_Switch_V8R27_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CAT|III, Rule-ID|SV-15476r2_rule, STIG-ID|NET1021, Vuln-ID|V-4584

Plugin: Cisco

Control ID: da7d8a9b849e0bb852085cbab5e343a2422dcb9c84943d746b91d9a65f7527eb