STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must be configured to send log data to at least two central log servers for the purpose of forwarding alerts to the administrators and the information system security officer (ISSO).

DISA Rule

SV-269803r1051794_rule

Vulnerability Number

V-269803

Group Title

SRG-APP-000516-NDM-000350

Rule Version

OS10-NDM-000970

Severity

CAT I

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure the OS10 Switch to send log data to at least two central log servers:

!
logging audit enable
!
logging server 10.0.0.4
logging server 10.0.0.8
!

Check Contents

Verify the OS10 Switch is configured to send log data to at least two central log servers.

OS10# show running-configuration logging
!
logging audit enable
!
logging server 10.0.0.4
logging server 10.0.0.8

If the OS10 Switch is not configured to send log data to at least two central log servers, this is a finding.

Vulnerability Number

V-269803

Documentable

False

Rule Version

OS10-NDM-000970

Severity Override Guidance

Verify the OS10 Switch is configured to send log data to at least two central log servers.

OS10# show running-configuration logging
!
logging audit enable
!
logging server 10.0.0.4
logging server 10.0.0.8

If the OS10 Switch is not configured to send log data to at least two central log servers, this is a finding.

Check Content Reference

M

Target Key

5666