5.1 - Storage Administrative System Auditing - Log Forwarding enabled

Information

Log and audit information is invaluable to an organization from a support and availability standpoint. In addition, the information and details contained in logs (syslog) and audit reports and outputs are generally of a sensitive nature. To maintain security controls and posture, it is imperative that organizations manage log and audit data in a secure manner.

Solution

Offloading of syslog information is necessary for limiting the scope or footprint of a breach to a single system or solution. Therefore, NetApp recommends securely offloading syslog information to a secure storage or retention location.

The cluster log-forwarding create command creates log-forwarding destinations for remote logging.

See Also

https://www.netapp.com/us/media/tr-4569.pdf

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-9(2)

Plugin: Netapp_API

Control ID: 9847523e596d29ca1614e539f6d98bb45706e100f3f8e4f1a0d28e9bf43d6ae4