Logging

MoyenneNiveau 1Automatiséearista-eos

Description

Logging is a critical part of network security. Maintaining an audit trail of system activity logs (syslog) can help identify configuration errors, understand past intrusions, troubleshoot service disruptions, and react to probes and scans of the network. Syslog levels 0-6 are the levels required to collect the necessary information to help in the recovery process. It is recommended to log all messages except debugging and send all log data to a syslog server. Audited against the output of 'show running-config' (not 'show running-config all').

Méthode de vérification

Méthode d'audit: Motif de configuration

Motif: (?m)^logging (?:vrf \S+ )?host \S+

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

! Configure a destination for syslog messages. Logging should be sent over the management vrf. logging trap 6 logging {vrf [management vrf]} host {ip address}

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: arista-eosnetworklogging
Référence: CIS Arista EOS Benchmark v1.0.0 - 1.1.7 Logging

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target arista-eos