Details

A backup of the FireEye database includes configuration settings not found in ‘show running-config full’ and should be done regularly.

Solution

Edit the configuration and add these lines:n

job 123 command 1 ‘fedb backup to-file backupfile’n
job 123 command 2 ‘fedb backup upload backupfile scp://username:[email protected]/path/filename’n
job 123 schedule type daily time 12:00:00n
job 123 enable

This security hardening control applies to the following category of controls within NIST 800-53: Contingency Planning.This control applies to the following type of system FireEye.

References

• 800-53|CP-9.

Source

• Tenable.com/audits