STIGQter: STIG Summary: Cisco ASA Firewall Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Cisco ASA must be configured to generate traffic log entries containing information to establish when (date and time) the events occurred.

DISA Rule

SV-239856r665854_rule

Vulnerability Number

V-239856

Group Title

SRG-NET-000075-FW-000010

Rule Version

CASA-FW-000050

Severity

CAT II

CCI(s)

• CCI-000131 - Ensure that audit records containing information that establishes when the event occurred.

Weight

10

Fix Recommendation

Configure the ASA to generate traffic log entries containing information to establish when the events occurred.

ASA(config)# logging timestamp

Check Contents

Verify that the logging timestamp command has been configured as shown below.

logging enable
logging timestamp

If the ASA is not configured to generate traffic log entries containing information to establish when the events occurred, this is a finding.

Vulnerability Number

V-239856

Documentable

False

Rule Version

CASA-FW-000050

Severity Override Guidance

Verify that the logging timestamp command has been configured as shown below.

logging enable
logging timestamp

If the ASA is not configured to generate traffic log entries containing information to establish when the events occurred, this is a finding.

Check Content Reference

M

Target Key

5339