STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must initiate session auditing upon startup.

DISA Rule

SV-269774r1051707_rule

Vulnerability Number

V-269774

Group Title

SRG-APP-000092-NDM-000224

Rule Version

OS10-NDM-000180

Severity

CAT II

CCI(s)

• CCI-001464 - Initiates session audits automatically at system start-up.
• CCI-000018 - Automatically audit account creation actions.
• CCI-001403 - Automatically audit account modification actions.
• CCI-001404 - Automatically audit account disabling actions.
• CCI-001405 - Automatically audit account removal actions.
• CCI-000172 - Generate audit records for the event types defined in AU-2 c that include the audit record content defined in AU-3.
• CCI-000130 - Ensure that audit records containing information that establishes what type of event occurred.
• CCI-000131 - Ensure that audit records containing information that establishes when the event occurred.
• CCI-000132 - Ensure that audit records containing information that establishes where the event occurred.
• CCI-000133 - Ensure that audit records containing information that establishes the source of the event.
• CCI-000134 - Ensure that audit records containing information that establishes the outcome of the event.
• CCI-001487 - Ensure that audit records containing information that establishes the identity of any individuals, subjects, or objects/entities associated with the event.
• CCI-000135 - Generate audit records containing the organization-defined additional information that is to be included in the audit records.
• CCI-002130 - Automatically audit account enabling actions.
• CCI-002234 - Log the execution of privileged functions.
• CCI-003938 - Automatically generate audit records of the enforcement actions.

Weight

10

Fix Recommendation

Configure the OS10 Switch to initiate session auditing upon startup:

OS10(config)# logging audit enable

Check Contents

Check the OS10 Switch to determine if it initiates session auditing upon startup:

!
logging audit enable

If theOS10 Switch does not initiate session auditing upon startup, this is a finding.

Vulnerability Number

V-269774

Documentable

False

Rule Version

OS10-NDM-000180

Severity Override Guidance

Check the OS10 Switch to determine if it initiates session auditing upon startup:

!
logging audit enable

If theOS10 Switch does not initiate session auditing upon startup, this is a finding.

Check Content Reference

M

Target Key

5666