STIGQter: STIG Summary: Dell OS10 Switch Router Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Dell OS10 Router must be configured to log all packets that have been dropped.

DISA Rule

SV-269867r1051986_rule

Vulnerability Number

V-269867

Group Title

SRG-NET-000078-RTR-000001

Rule Version

OS10-RTR-000260

Severity

CAT III

CCI(s)

CCI-000134 - Ensure that audit records containing information that establishes the outcome of the event.

Weight

Fix Recommendation

Configure the router to enable audit logging and to log all packets dropped by ACL rules.

OS10(config)# logging audit enable

OS10(config)# ip access-list FILTER_EXTERNAL_INGRESS
OS10(config-ipv4-acl)# permit ...
OS10(config-ipv4-acl)# permit ...
OS10(config-ipv4-acl)# deny ip any any log

Check Contents

Review the router configuration to verify that audit logging is enabled.

!
logging audit enable

Review the router configuration to verify that all ACL rules that drop packets are configured to log the event.

!
ip access-list FILTER_EXTERNAL_INGRESS
seq 10 permit ...
seq 20 permit ...
seq 30 permit ...
seq 40 deny ip any any log

If audit logging is disabled or an ACL is not configured to log dropped packets, this is a finding.

The Dell OS10 Router must be configured to log all packets that have been dropped.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key