Detections
Analytics
ARBA-ND-000325 - AOS must off-load audit records onto a different system or media than the system being audited.
Information
Information stored in one location is vulnerable to accidental or incidental deletion or alteration.Off-loading is a common process in information systems with limited audit storage capacity.
Solution
Configure AOS with the following commands:configure terminal
logging <IPv4 or IPv6 address>
write memory
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_HPE_Aruba_Networking_AOS_Y26M04_STIG.zip
Item Details
Audit Name: DISA HPE Aruba Networking AOS NDM STIG v1r1
Category: AUDIT AND ACCOUNTABILITY
References: 800-53|AU-4(1), CAT|II, CCI|CCI-001851, Rule-ID|SV-266966r1039919_rule, STIG-ID|ARBA-ND-000325, Vuln-ID|V-266966
Plugin: ArubaOS
Control ID: 60e91cf3d1ba667c49f64f55e7c46f5ef427f342adcdf70baa34aa9e1986a1c7