STIGQter: STIG Summary: HPE Aruba Networking AOS NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 22 Oct 2024:

AOS must generate log records for a locally developed list of auditable events.

DISA Rule

SV-266968r1039963_rule

Vulnerability Number

V-266968

Group Title

SRG-APP-000516-NDM-000334

Rule Version

ARBA-ND-000334

Severity

CAT II

CCI(s)

CCI-000169 - Provide audit record generation capability for the event types the system is capable of auditing as defined in AU-2 a. on organization-defined information system components.
CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure AOS with the following commands for each logging category:
configure terminal
logging <category> level <level>
write memory

Check Contents

Verify the AOS configuration with the following command:
show logging level

If the logging levels are not set to the organization-desired level, this is a finding.

Vulnerability Number

V-266968

Documentable

False

Rule Version

ARBA-ND-000334

Severity Override Guidance

Verify the AOS configuration with the following command:
show logging level

If the logging levels are not set to the organization-desired level, this is a finding.

Check Content Reference

Target Key

5648