Configure syslog-client to log using TLS

YüksekDüzey 1Otomatikaruba-cx

Açıklama

Logging to a remote syslog server should be configured to use TLS and include auditable events. PASS requires a TLS syslog server that includes auditable events. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^logging \S+ tls\b[^\n]*\binclude-auditable-events\b

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

logging syslog.example.com tls 6514 auth-mode subject-name vrf mgmt include-auditable-events # CIS guidance: Configure the switch to send logs to a syslog-server using tls on the mgmt VRF and include auditable events. logging <SYSLOG-SERVER> tls <PORT> auth-mode subject-name vrf mgmt include- auditable-events

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: aruba-cxlogging
Referans: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.11.2 Configure syslog-client to log using TLS

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target aruba-cx