STIGQter: STIG Summary: Dragos Platform 2.x Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Apr 2026:

The Syslog client must use TCP connections.

DISA Rule

SV-271027r1130600_rule

Vulnerability Number

V-271027

Group Title

SRG-APP-000383

Rule Version

DRAG-OT-001630

Severity

CAT II

CCI(s)

• CCI-001762 - Disable or remove organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure.

Weight

10

Fix Recommendation

Changing UDP ports to TCP ports and using TCP instead involves modifying the configuration of the application or service that uses UDP for communication.

Modify the syslog client configuration to specify TCP instead of UDP. This may involve changing port numbers or selecting TCP as the communication protocol.

After making the necessary changes, restart the application or service to apply the new configuration settings. This ensures that the syslog client starts using TCP ports instead of UDP ports.

Check Contents

Use the netstat command to display active UDP traffic:
netstat -n -u

If the syslog client is using a UDP connection, this is a finding.

Vulnerability Number

V-271027

Documentable

False

Rule Version

DRAG-OT-001630

Severity Override Guidance

Use the netstat command to display active UDP traffic:
netstat -n -u

If the syslog client is using a UDP connection, this is a finding.

Check Content Reference

M

Target Key

5675