UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The Cisco switch must be configured to off-load log records onto a different system than the system being audited.


Overview

Finding ID Version Rule ID IA Controls Severity
V-220512 CISC-ND-001310 SV-220512r879886_rule Medium
Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.
STIG Date
Cisco NX OS Switch NDM Security Technical Implementation Guide 2024-02-06

Details

Check Text ( C-22227r539257_chk )
Review the Cisco switch configuration to verify that it is compliant with this requirement as shown in the example below:

logging server 10.1.48.10 6

If the Cisco switch is not configured to off-load log records onto a different system than the system being audited, this is a finding.
Fix Text (F-22216r539258_fix)
Configure the Cisco switch to send log records to a syslog server as shown in the example below:

SW4(config)# logging server 10.1.48.10 6