STIGQter: STIG Summary: Cisco ACI NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

The Cisco ACI must generate log records for a locally developed list of auditable events.

DISA Rule

SV-271944r1168370_rule

Vulnerability Number

V-271944

Group Title

SRG-APP-000516-NDM-000334

Rule Version

CACI-ND-000029

Severity

CAT II

CCI(s)

CCI-000169 - Provide audit record generation capability for the event types the system is capable of auditing as defined in AU-2 a. on organization-defined information system components.

Weight

Fix Recommendation

Configure locally required events for auditing in compliance with the SSP:
1. Navigate to the "Contracts" section within the tenant.
2. View the existing contracts: Tenants >> {{your_tenant}} >> Contracts >> {{your_contract}}.
3. Check the directive to enable log is for each filter.

Check Contents

Configure locally required events for auditing in compliance with the SSP:
1. Navigate to the "Contracts" section within the tenant.
2. View the existing contracts: Tenants >> {{your_tenant}} >> Contracts >> {{your_contract}} to verify that log is enabled for each filter.

If log is not enabled for each filter, this is a finding.

Vulnerability Number

V-271944

Documentable

False

Rule Version

CACI-ND-000029

Severity Override Guidance

Configure locally required events for auditing in compliance with the SSP:
1. Navigate to the "Contracts" section within the tenant.
2. View the existing contracts: Tenants >> {{your_tenant}} >> Contracts >> {{your_contract}} to verify that log is enabled for each filter.

If log is not enabled for each filter, this is a finding.

Check Content Reference

Target Key

5682