STIGQter: STIG Summary: Fortinet FortiGate Firewall NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 05 Jan 2026:

The FortiGate device must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

DISA Rule

SV-234180r961392_rule

Vulnerability Number

V-234180

Group Title

SRG-APP-000357-NDM-000293

Rule Version

FGFW-ND-000105

Severity

CAT II

CCI(s)

• CCI-001849 - Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Weight

10

Fix Recommendation

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# config log disk setting
# set max-log-file-size {INTEGER 1 - 100 MB}
# set diskfull overwrite
# end

Check Contents

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration log disk setting | grep -i max-log-file-size

The output should be:
set max-log-file-size {INTEGER}

If max-log-file-size for local disk storage is not set to the organization-defined audit record storage, this is a finding.

Vulnerability Number

V-234180

Documentable

False

Rule Version

FGFW-ND-000105

Severity Override Guidance

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration log disk setting | grep -i max-log-file-size

The output should be:
set max-log-file-size {INTEGER}

If max-log-file-size for local disk storage is not set to the organization-defined audit record storage, this is a finding.

Check Content Reference

M

Target Key

5260