Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)

СреднийУровень 1Автоматическаяcisco-asa

Описание

Determines the size of the local buffer in which the logs are stored so that they can be checked by the administrator. The internal log buffer serves as a temporary storage location. New messages are appended to the end of the list. When the buffer is full, that is, when the buffer wraps, old messages are overwritten as new messages are generated. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

Как проверяется

Метод проверки: Шаблон конфигурации

Шаблон: (?m)^logging buffer-size (?:52428[89]|5242[9]\d|524[3-9]\d\d|52[5-9]\d{3}|5[3-9]\d{4}|[6-9]\d{5}|\d{7,})\s*$

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

! - Step 1: Run the following command to set the logging buffer-size to 524288 The size is in bytes and is to be chosen between 4096 and 1048576 bytes logging buffer-size 524288

Свойства

Операционные системы: Любая
Теги: cisco-asanetworklogging
Источник: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.7 Ensure 'logging buffer size' is greater than or equal to '524288' bytes (512kb)

Проверить этот хост

Выполните команду на компьютере, аудит которого вам разрешён. Сканирование работает только на чтение.

shell

tmaegis scan --target cisco-asa