Ensure 'logging with the device ID' is configured correctly

보통레벨 1자동cisco-asa

설명

Includes the device ID in the logs generated. In an environment where logs are collected from many different sources, identifying the logs from a specific device is alleviated by doing a query including the device's hostname included in the logs and helps to quickly gather the expected results. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^logging device-id \S

조치 방법

조치 방식: 가이드 또는 인프라 패치

! Run the following to enable logging with the device hostname: logging device-id hostname In a multi-context security appliance, run the following command: logging device-id context-name

속성

운영 체제: 모두
태그: cisco-asanetworklogging
참고 자료: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.4 Ensure 'logging with the device ID' is configured correctly

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target cisco-asa