UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The Cisco switch must be configured to off-load log records onto a different system than the system being audited.


Overview

Finding ID Version Rule ID IA Controls Severity
V-101569 CISC-ND-001310 SV-110673r1_rule Medium
Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.
STIG Date
Cisco NX-OS Switch NDM Security Technical Implementation Guide 2020-05-20

Details

Check Text ( C-100455r1_chk )
Review the Cisco switch configuration to verify that it is compliant with this requirement as shown in the example below:

logging server 10.1.48.10 6

If the Cisco switch is not configured to off-load log records onto a different system than the system being audited, this is a finding.
Fix Text (F-107253r1_fix)
Configure the Cisco switch to send log records to a syslog server as shown in the example below:

SW4(config)# logging server 10.1.48.10 6