Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)

中レベル 1自動cisco-asa

説明

Determines the size of the local buffer in which the logs are stored so that they can be checked by the administrator. The internal log buffer serves as a temporary storage location. New messages are appended to the end of the list. When the buffer is full, that is, when the buffer wraps, old messages are overwritten as new messages are generated. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

チェック方法

監査方法: 設定パターン

パターン: (?m)^logging buffer-size (?:52428[89]|5242[9]\d|524[3-9]\d\d|52[5-9]\d{3}|5[3-9]\d{4}|[6-9]\d{5}|\d{7,})\s*$

修正方法

修正方法: ガイダンスまたは IaC パッチ

! - Step 1: Run the following command to set the logging buffer-size to 524288 The size is in bytes and is to be chosen between 4096 and 1048576 bytes logging buffer-size 524288

プロパティ

オペレーティングシステム: すべて
タグ: cisco-asanetworklogging
参照: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.7 Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target cisco-asa