5.1 - Storage Administrative System Auditing - Log Forwarding enabled

Information

Log and audit information is invaluable to an organization from a support and availability standpoint. In addition, the information and details contained in logs (syslog) and audit reports and outputs are generally of a sensitive nature. To maintain security controls and posture, it is imperative that organizations manage log and audit data in a secure manner.

Solution

Offloading of syslog information is necessary for limiting the scope or footprint of a breach to a single system or solution. Therefore, NetApp recommends securely offloading syslog information to a secure storage or retention location.

The cluster log-forwarding create command creates log-forwarding destinations for remote logging.

See Also

https://www.netapp.com/us/media/tr-4569.pdf

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-9(2)

Plugin: Netapp_API

Control ID: ac3ac37de5f38820f17ef9e12b6f9c0f2e40db2ac9944db5ad74ad4f20533a56