Detections
Analytics
ARBA-ND-000334 - AOS must generate log records for a locally developed list of auditable events.
Information
Auditing and logging are key components of any security architecture. Logging the actions of specific events provides a means to investigate an attack, recognize resource utilization or capacity thresholds, or identify an improperly configured network device. If auditing is not comprehensive, it will not be useful for intrusion monitoring, security investigations, and forensic analysis.Solution
Configure AOS with the following commands for each logging category:configure terminal
logging <category> level <level>
write memory
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_HPE_Aruba_Networking_AOS_Y26M04_STIG.zip
Item Details
Audit Name: DISA HPE Aruba Networking AOS NDM STIG v1r1
Category: AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
References: 800-53|AU-12a., 800-53|CM-6b., CAT|II, CCI|CCI-000169, CCI|CCI-000366, Rule-ID|SV-266968r1039963_rule, STIG-ID|ARBA-ND-000334, Vuln-ID|V-266968
Plugin: ArubaOS
Control ID: f59c498b04b08cf4ca835b76d40add10cef042aa6ef5fa81a9f0675e0d2636c1