FireEye – Remote syslog is enabled

Details

Security log information could be modified or lost if the host is compromised or fails. Syslog messages should be sent to a remote host.

Solution

The default level is ‘notice’. Edit the configuration and add or modify this line:n

logging

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system FireEye.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles