Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)

MoyenneNiveau 1Automatiséecisco-asa

Description

Determines the size of the local buffer in which the logs are stored so that they can be checked by the administrator. The internal log buffer serves as a temporary storage location. New messages are appended to the end of the list. When the buffer is full, that is, when the buffer wraps, old messages are overwritten as new messages are generated. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

Méthode de vérification

Méthode d'audit: Motif de configuration

Motif: (?m)^logging buffer-size (?:52428[89]|5242[9]\d|524[3-9]\d\d|52[5-9]\d{3}|5[3-9]\d{4}|[6-9]\d{5}|\d{7,})\s*$

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

! - Step 1: Run the following command to set the logging buffer-size to 524288 The size is in bytes and is to be chosen between 4096 and 1048576 bytes logging buffer-size 524288

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: cisco-asanetworklogging
Référence: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.7 Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target cisco-asa