Cisco ASA
TMA-CISCO-ASA-1.10.7
Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)
Descripción
Determines the size of the local buffer in which the logs are stored so that they can be checked by the administrator. The internal log buffer serves as a temporary storage location. New messages are appended to the end of the list. When the buffer is full, that is, when the buffer wraps, old messages are overwritten as new messages are generated. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).
Cómo se verifica
Método de auditoría: Patrón de configuración
- Patrón
(?m)^logging buffer-size (?:52428[89]|5242[9]\d|524[3-9]\d\d|52[5-9]\d{3}|5[3-9]\d{4}|[6-9]\d{5}|\d{7,})\s*$
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
! - Step 1: Run the following command to set the logging buffer-size to 524288 The size is in bytes and is to be chosen between 4096 and 1048576 bytes logging buffer-size 524288
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- cisco-asanetworklogging
- Referencia
- CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.7 Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target cisco-asa