Ensure 'logging to monitor' is disabled

MittelStufe 1Automatisiertcisco-asa

Beschreibung

Disables the logging to monitor. The ASA by default send logs to monitor for Telnet and SSH sessions. The logs messages will continuously scroll on the monitor after the "Terminal Monitor" command is issued. This consumes a lot of resources causing high CPU usage and should be avoided. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: (?m)^logging monitor\b

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

! Run the following command to disable the logging monitor no logging monitor

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-asanetworklogging
Referenz: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.2 Ensure 'logging to monitor' is disabled

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target cisco-asa