Ensure 'logging to monitor' is disabled

SrednjaNivo 1Automatskacisco-asa

Opis

Disables the logging to monitor. The ASA by default send logs to monitor for Telnet and SSH sessions. The logs messages will continuously scroll on the monitor after the "Terminal Monitor" command is issued. This consumes a lot of resources causing high CPU usage and should be avoided. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^logging monitor\b

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Run the following command to disable the logging monitor no logging monitor

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-asanetworklogging
Referenca: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.10.2 Ensure 'logging to monitor' is disabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target cisco-asa