TMAegisBeta
Weitere Regeln für arista-eos

Arista EOS

TMA-ARISTA-EOS-1.1.7

Logging

MittelStufe 1Automatisiertarista-eos

Beschreibung

Logging is a critical part of network security. Maintaining an audit trail of system activity logs (syslog) can help identify configuration errors, understand past intrusions, troubleshoot service disruptions, and react to probes and scans of the network. Syslog levels 0-6 are the levels required to collect the necessary information to help in the recovery process. It is recommended to log all messages except debugging and send all log data to a syslog server. Audited against the output of 'show running-config' (not 'show running-config all').

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster
(?m)^logging (?:vrf \S+ )?host \S+

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

! Configure a destination for syslog messages. Logging should be sent over the management vrf. logging trap 6 logging {vrf [management vrf]} host {ip address}

Eigenschaften

Betriebssysteme
Beliebig
Tags
arista-eosnetworklogging
Referenz
CIS Arista EOS Benchmark v1.0.0 - 1.1.7 Logging

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell
tmaegis scan --target arista-eos