STIGQter: STIG Summary: Cisco ASA NDM Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Cisco ASA must be configured to produce audit log records containing information to establish the source of events.

DISA Rule

SV-239908r960900_rule

Vulnerability Number

V-239908

Group Title

SRG-APP-000098-NDM-000228

Rule Version

CASA-ND-000290

Severity

CAT II

CCI(s)

• CCI-000133 - Ensure that audit records containing information that establishes the source of the event.

Weight

10

Fix Recommendation

Configure the Cisco ASA as shown in the example below.

ASA(config)# logging enable
ASA(config)# logging buffered informational
ASA(config)# end

Check Contents

Review the Cisco ASA configuration to verify that it is compliant with this requirement. The configuration should look similar to the example below:

logging enable
logging buffered informational

Note: The ASA will log location (IP address or console) from where configuration commands are entered.

If the ASA is not configured to generate audit records containing information to establish the source of events, this is a finding.

Vulnerability Number

V-239908

Documentable

False

Rule Version

CASA-ND-000290

Severity Override Guidance

Review the Cisco ASA configuration to verify that it is compliant with this requirement. The configuration should look similar to the example below:

logging enable
logging buffered informational

Note: The ASA will log location (IP address or console) from where configuration commands are entered.

If the ASA is not configured to generate audit records containing information to establish the source of events, this is a finding.

Check Content Reference

M

Target Key

5342