STIGQter STIGQter: STIG Summary: Cisco ASA NDM Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Cisco ASA must be configured to generate audit records showing starting and ending time for administrator access to the system.

DISA Rule

SV-239937r961830_rule

Vulnerability Number

V-239937

Group Title

SRG-APP-000505-NDM-000322

Rule Version

CASA-ND-001240

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the ASA to log session start and ending per admin session as shown in the example below.

ASA(config)# logging enable
ASA(config)# logging timestamp
ASA(config)# logging buffered informational
ASA(config)# end

Check Contents

Review the Cisco ASA configuration to verify it is compliant with this requirement. The configuration should look similar to the example below.

logging enable
logging timestamp
logging buffered informational

Note: The ASA will log all login attempts as well as log the administrator’s name and time executing the enable command. The ASA will also log the time when the administrator logs out.

If the Cisco ASA is not configured to generate log records showing starting and ending time for administrator access to the system, this is a finding.

Vulnerability Number

V-239937

Documentable

False

Rule Version

CASA-ND-001240

Severity Override Guidance

Review the Cisco ASA configuration to verify it is compliant with this requirement. The configuration should look similar to the example below.

logging enable
logging timestamp
logging buffered informational

Note: The ASA will log all login attempts as well as log the administrator’s name and time executing the enable command. The ASA will also log the time when the administrator logs out.

If the Cisco ASA is not configured to generate log records showing starting and ending time for administrator access to the system, this is a finding.

Check Content Reference

M

Target Key

5342