STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must have audit guarantee enabled.

DISA Rule

SV-246935r961401_rule

Vulnerability Number

V-246935

Group Title

SRG-APP-000360-NDM-000295

Rule Version

NAOT-AU-000003

Severity

CAT II

CCI(s)

CCI-001858 - Provide an alert in an organization-defined real-time-period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.

Weight

Fix Recommendation

Use the command "vserver audit modify -vserver <vserver_name> -destination <audit log location> -audit-guarantee true" to set audit-guarantee to true.

An example command for a vserver named svm01 with the audit logs at /audit_log would be "vserver audit modify -vserver svm01 -destination /audit_log -audit-guarantee true".

Use the command "vserver audit show -fields audit-guarantee" to verify the change.

Check Contents

Use "vserver audit show -fields audit-guarantee" to see if audit guarantee is enabled.

If audit-guarantee is set to false, this is a finding.

Vulnerability Number

V-246935

Documentable

False

Rule Version

NAOT-AU-000003

Severity Override Guidance

Use "vserver audit show -fields audit-guarantee" to see if audit guarantee is enabled.

If audit-guarantee is set to false, this is a finding.

Check Content Reference

Target Key

5415