Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)

보통레벨 1자동cisco-asa

설명

Determines the size of the local buffer in which the logs are stored so that they can be checked by the administrator. The internal log buffer serves as a temporary storage location. New messages are appended to the end of the list. When the buffer is full, that is, when the buffer wraps, old messages are overwritten as new messages are generated. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^logging buffer-size (?:52428[89]|5242[9]\d|524[3-9]\d\d|52[5-9]\d{3}|5[3-9]\d{4}|[6-9]\d{5}|\d{7,})\s*$

조치 방법

조치 방식: 가이드 또는 인프라 패치

! - Step 1: Run the following command to set the logging buffer-size to 524288 The size is in bytes and is to be chosen between 4096 and 1048576 bytes logging buffer-size 524288

속성

운영 체제: 모두
태그: cisco-asanetworklogging
참고 자료: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.7 Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target cisco-asa