Syslog with TLS support

YüksekDüzey 2Otomatikarista-eos

Açıklama

Syslog over TLS is a secure standard (RFC 5425) that encrypts log messages in transit using Transport Layer Security. It protects sensitive operational and security data from interception and tampering. Syslog messages may transit several hops to arrive at the intended collector. Some intermediary networks may not be trusted by the originator, relay, or receiver because the network is in a different security domain or at a different security level from the ... Audited against the output of 'show running-config' (not 'show running-config all').

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^logging (?:vrf \S+ )?host \S+ [^\n]*\bprotocol tls\b

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! 1. Create an SSL profile ssl profile syslog-profile certificate clientCert key ClientKey trust certificate serverCA 2. Define syslog server logging vrf MGMT host 10.1.1.1 protocol tls ssl-profile syslog-profile

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: arista-eosnetworklogging
Referans: CIS Arista EOS Benchmark v1.0.0 - 1.1.9 Syslog with TLS support

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target arista-eos --level 2