STIGQter: STIG Summary: Cisco ASA NDM Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Cisco ASA must be configured to produce audit records containing information to establish where the events occurred.

DISA Rule

SV-239907r960897_rule

Vulnerability Number

V-239907

Group Title

SRG-APP-000097-NDM-000227

Rule Version

CASA-ND-000280

Severity

CAT II

CCI(s)

• CCI-000132 - Ensure that audit records containing information that establishes where the event occurred.

Weight

10

Fix Recommendation

Configure the Cisco ASA as shown in the example below.

ASA(config)# logging enable
ASA(config)# logging buffered informational
ASA(config)# end

Check Contents

Review the Cisco ASA configuration to verify that it is compliant with this requirement. The configuration should look similar to the example below.

logging enable
logging buffered informational

Note: The ASA will log location (IP address or console) from where configuration commands are entered.

If the ASA is not configured to generate audit records containing information to establish where the events occurred, this is a finding.

Vulnerability Number

V-239907

Documentable

False

Rule Version

CASA-ND-000280

Severity Override Guidance

Review the Cisco ASA configuration to verify that it is compliant with this requirement. The configuration should look similar to the example below.

logging enable
logging buffered informational

Note: The ASA will log location (IP address or console) from where configuration commands are entered.

If the ASA is not configured to generate audit records containing information to establish where the events occurred, this is a finding.

Check Content Reference

M

Target Key

5342