STIGQter: STIG Summary: Cisco ASA NDM Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Cisco ASA must be configured to record time stamps for audit records that meet a granularity of one second for a minimum degree of precision.

DISA Rule

SV-239925r961446_rule

Vulnerability Number

V-239925

Group Title

SRG-APP-000375-NDM-000300

Rule Version

CASA-ND-000970

Severity

CAT II

CCI(s)

• CCI-001889 - Record time stamps for audit records that meet organization-defined granularity of time measurement.

Weight

10

Fix Recommendation

Configure the ASA to include the time on all log records as shown in the example below.

ASA(config)# logging timestamp

Check Contents

Verify the ASA is configured to include the time on all log records as shown in the configuration example below.

logging timestamp

If time stamp is not configured, this is a finding.

Vulnerability Number

V-239925

Documentable

False

Rule Version

CASA-ND-000970

Severity Override Guidance

Verify the ASA is configured to include the time on all log records as shown in the configuration example below.

logging timestamp

If time stamp is not configured, this is a finding.

Check Content Reference

M

Target Key

5342