Configure syslog-client to log using TLS

TinggiLevel 1Otomatisaruba-cx

Deskripsi

Logging to a remote syslog server should be configured to use TLS and include auditable events. PASS requires a TLS syslog server that includes auditable events. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^logging \S+ tls\b[^\n]*\binclude-auditable-events\b

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

logging syslog.example.com tls 6514 auth-mode subject-name vrf mgmt include-auditable-events # CIS guidance: Configure the switch to send logs to a syslog-server using tls on the mgmt VRF and include auditable events. logging <SYSLOG-SERVER> tls <PORT> auth-mode subject-name vrf mgmt include- auditable-events

Properti

Sistem operasi: Apa saja
Tag: aruba-cxlogging
Referensi: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.11.2 Configure syslog-client to log using TLS

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target aruba-cx