Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-4584 | NET1021 | SV-4584r2_rule | ECAT-1 ECAT-2 ECSC-1 | Low |
Description |
---|
Logging is a critical part of router security. Maintaining an audit trail of system activity logs (syslog) can help identify configuration errors, understand past intrusions, troubleshoot service disruptions, and react to probes and scans of the network. Syslog levels 0-6 are the levels required to collect the necessary information to help in the recovery process. |
STIG | Date |
---|---|
Infrastructure Router Security Technical Implementation Guide | 2013-10-08 |
Check Text ( C-3950r3_chk ) |
---|
Review the network element’s configuration to ensure all messages up to and including severity level 6 (informational) are logged and sent to a syslog server. Severity Level Message Type 0 Emergencies 1 Alerts 2 Critical 3 Errors 4 Warning 5 Notifications 6 Informational 7 Debugging |
Fix Text (F-4517r2_fix) |
---|
Configure the network element to log all messages except debugging and send all log data to a syslog server. |