STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must be configured to send audit log data to a central log server.

DISA Rule

SV-246964r1137890_rule

Vulnerability Number

V-246964

Group Title

SRG-APP-000516-NDM-000350

Rule Version

NAOT-SI-000001

Severity

CAT I

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure ONTAP for remote syslogging with "cluster log-forwarding create -destination <hostname_or_ip_address>".

Check Contents

Use "cluster log-forwarding show" to see if audit logs are being sent to a remote logging server.

Sample output from the command:

Verify Syslog
Destination Host Port Protocol Server Facility
------------------------ ------ ----------------------- -------- --------
192.168.0.1 514 udp-unencrypted false user

If no remote logging servers are listed, this is a finding.

Vulnerability Number

V-246964

Documentable

False

Rule Version

NAOT-SI-000001

Severity Override Guidance

Use "cluster log-forwarding show" to see if audit logs are being sent to a remote logging server.

Sample output from the command:

Verify Syslog
Destination Host Port Protocol Server Facility
------------------------ ------ ----------------------- -------- --------
192.168.0.1 514 udp-unencrypted false user

If no remote logging servers are listed, this is a finding.

Check Content Reference

M

Target Key

5415