STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

DISA Rule

SV-273820r1110843_rule

Vulnerability Number

V-273820

Group Title

SRG-APP-000357-NDM-000293

Rule Version

RCKS-NDM-000650

Severity

CAT II

CCI(s)

• CCI-001849 - Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Weight

10

Fix Recommendation

Configure logging:

ICX(config)#logging buffered 4000

Note: Reload may be required to put new log size into effect.

Check Contents

Verify the log size complies with organization-defined audit record storage:

ICX# show logging
Syslog logging: enabled ( 0 messages dropped, 0 flushes, 7 overruns)
Buffer logging: level ACDMEINW, 4000 messages logged
level code: A=alert C=critical D=debugging M=emergency E=error
I=informational N=notification W=warning
Static Log Buffer:
May 01 19:30:50:I:System: Stack unit 1 POE PS 1, Internal Power supply with 370000 mwatts capacity is up
May 01 19:30:55:I:System: Stack unit 1 Fan 1 (Rear Side Right), ok
May 01 19:30:55:I:System: Stack unit 1 Fan 2 (Rear Side Left), ok
Dynamic Log Buffer (4000 lines):
Jul 31 14:24:54:I:CLI CMD: "show logging" by local user from ssh

If the size of the Dynamic Log Buffer does not meet organization-defined audit record storage requirements, this is a finding.

Vulnerability Number

V-273820

Documentable

False

Rule Version

RCKS-NDM-000650

Severity Override Guidance

Verify the log size complies with organization-defined audit record storage:

ICX# show logging
Syslog logging: enabled ( 0 messages dropped, 0 flushes, 7 overruns)
Buffer logging: level ACDMEINW, 4000 messages logged
level code: A=alert C=critical D=debugging M=emergency E=error
I=informational N=notification W=warning
Static Log Buffer:
May 01 19:30:50:I:System: Stack unit 1 POE PS 1, Internal Power supply with 370000 mwatts capacity is up
May 01 19:30:55:I:System: Stack unit 1 Fan 1 (Rear Side Right), ok
May 01 19:30:55:I:System: Stack unit 1 Fan 2 (Rear Side Left), ok
Dynamic Log Buffer (4000 lines):
Jul 31 14:24:54:I:CLI CMD: "show logging" by local user from ssh

If the size of the Dynamic Log Buffer does not meet organization-defined audit record storage requirements, this is a finding.

Check Content Reference

M

Target Key

5695