Ensure 'logging to monitor' is disabled

SedangLevel 1Otomatiscisco-asa

Deskripsi

Disables the logging to monitor. The ASA by default send logs to monitor for Telnet and SSH sessions. The logs messages will continuously scroll on the monitor after the "Terminal Monitor" command is issued. This consumes a lot of resources causing high CPU usage and should be avoided. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^logging monitor\b

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

! Run the following command to disable the logging monitor no logging monitor

Properti

Sistem operasi: Apa saja
Tag: cisco-asanetworklogging
Referensi: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.2 Ensure 'logging to monitor' is disabled

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target cisco-asa