1. Home
  2. Security Hardening
  3. DISA STIG Cisco NX OS Switch NDM V2R3
  4. CISC-ND-000250 – The Cisco switch must be configured to generate audit records when successful/unsuccessful attempts to log on with access privileges occur – login on-failure log
Searching...

CISC-ND-000250 – The Cisco switch must be configured to generate audit records when successful/unsuccessful attempts to log on with access privileges occur – login on-failure log

Details

Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.

Audit records can be generated from various components within the information system (e.g., module or policy filter).

Solution

Configure the Cisco switch to log all logon attempts as shown in the example below:

Step 1: Lower the authpriv level to 6.

SW1(config)# logging level authpriv 6

Step 2: Configure a logfile to record log messages at level 6.

SW1(config)# logging logfile LOG_FILE 6

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Cisco.

References

Source

Updated on July 16, 2022
Was this article helpful?
Yes No

Related Articles