Ensure ‘logging to monitor’ is disabled
Details Disables the logging to monitor Solution Firepower Device Manager: Use Objects > Syslog Servers and Device > System Settings...
- Home
- Security Hardening
- Tenable Cisco Firepower Threat Defense Best Practices
Tenable Cisco Firepower Threat Defense Best Practices
Ensure ‘logging to monitor’ is disabled – show logging
Details Disables the logging to monitor Solution Firepower Device Manager: Use Objects > Syslog Servers and Device > System Settings...Ensure ‘logging to Serial console’ is disabled
Details Disables the logging to the Serial console Rationale: Enabling the logs to be sent to the Serial console may...Ensure ‘logging trap’ is enabled
Details Determines which syslog messages should be sent to the syslog server. Rationale: Syslog messages are an invaluable tool for...Ensure ‘logging trap severity ‘ is greater than or equal to ‘5’
Details Determines which syslog messages should be sent to the syslog server. Rationale: Syslog messages are an invaluable tool for...Ensure ‘logging with timestamps’ is enabled
Details Allows the timestamp to logs generated Rationale: Enabling timestamps, to mark the generation time of log messages, reduces the...Ensure ‘logging with timestamps’ is enabled – show logging
Details Allows the timestamp to logs generated Rationale: Enabling timestamps, to mark the generation time of log messages, reduces the...Ensure ‘noproxyarp’ is enabled for untrusted interfaces
Details Disables the Proxy-ARP function on untrusted interfaces Rationale: The Firepower replies to ARP requests performed to IP addresses belonging...Ensure ‘OSPF authentication’ is enabled
Details Enables the authentication of OSPF neighbor before routing information is received from the neighbor Rationale: Enabling the routing protocol...Ensure ‘Password Policy’ is enabled – minimum-length
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...