STIGQter: STIG Summary: Arista MLS EOS 4.X NDM Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Arista network Arista device must be configured to send log data to a central log server for the purpose of forwarding alerts to the administrators and the ISSO.

DISA Rule

SV-255966r961863_rule

Vulnerability Number

V-255966

Group Title

SRG-APP-000516-NDM-000350

Rule Version

ARST-ND-000850

Severity

CAT I

CCI(s)

• CCI-000163 - Protect audit information from unauthorized modification.
• CCI-000164 - Protect audit information from unauthorized deletion.
• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

The Arista network device must be configured for Syslog server for auditing data by using the following commands:

switch(config)#logging host 192.168.16.30 514

Check Contents

Verify the Arista network device has been configured Syslog server for auditing data by using the following command:

switch#show running-config | section logging

logging host 192.168.16.30 514
!

If logging host is not configured to send log data to a central log server, this is a finding.

Vulnerability Number

V-255966

Documentable

False

Rule Version

ARST-ND-000850

Severity Override Guidance

Verify the Arista network device has been configured Syslog server for auditing data by using the following command:

switch#show running-config | section logging

logging host 192.168.16.30 514
!

If logging host is not configured to send log data to a central log server, this is a finding.

Check Content Reference

M

Target Key

5511