STIGQter: STIG Summary: Cisco ISE NAC Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 13 Apr 2021:

The Cisco ISE must off-load log records onto a different system.

DISA Rule

SV-242593r714089_rule

Vulnerability Number

V-242593

Group Title

SRG-NET-000334-NAC-001350

Rule Version

CSCO-NC-000190

Severity

CAT II

CCI(s)

• CCI-001851 - The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited.

Weight

10

Fix Recommendation

From the Web Admin portal:
1. Navigate to Administration >> System >> Backup and Restore.
2. Select the "Schedule" option next to Operational Data Backup.
3. Configure operational data backup at a desired frequency.

Check Contents

Navigate to Administration >> System >> Backup and Restore.

Ensure that operational data backups are scheduled.

If operational backups are not scheduled, this is a finding.

Vulnerability Number

V-242593

Documentable

False

Rule Version

CSCO-NC-000190

Severity Override Guidance

Navigate to Administration >> System >> Backup and Restore.

Ensure that operational data backups are scheduled.

If operational backups are not scheduled, this is a finding.

Check Content Reference

M

Target Key

5383

Comments