Details

Having a procedure tested and verified will prevent the logs from filling when they reach 75% capacity.

Solution

Configure the device to dump logs to a syslog server when reaching a storage capacity of 75%.

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_Network_Firewall_V8R25_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Cisco.

References

• 800-53|AU-9(2)
• CAT|III
• Rule-ID|SV-15273r2_rule
• STIG-ID|NET0388
• Vuln-ID|V-14647

Source

• Tenable.com/audits