STIGQter: STIG Summary: HPE Aruba Networking AOS NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 22 Oct 2024:

AOS must off-load audit records onto a different system or media than the system being audited.

DISA Rule

SV-266966r1039919_rule

Vulnerability Number

V-266966

Group Title

SRG-APP-000515-NDM-000325

Rule Version

ARBA-ND-000325

Severity

CAT II

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure AOS with the following commands:
configure terminal
logging <IPv4 or IPv6 address>
write memory

Check Contents

Verify the AOS configuration with the following command:
show logging server

If a configured syslog server is not returned, this is a finding.

Vulnerability Number

V-266966

Documentable

False

Rule Version

ARBA-ND-000325

Severity Override Guidance

Verify the AOS configuration with the following command:
show logging server

If a configured syslog server is not returned, this is a finding.

Check Content Reference

M

Target Key

5648