STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must off-load audit records onto a different system or media than the system being audited.

DISA Rule

SV-273832r1110849_rule

Vulnerability Number

V-273832

Group Title

SRG-APP-000515-NDM-000325

Rule Version

RCKS-NDM-000880

Severity

CAT II

CCI(s)

CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.
CCI-001858 - Provide an alert in an organization-defined real-time-period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.

Weight

Fix Recommendation

Configure syslog host:

SSH@ICX(config)# logging host x.x.x.x

Check Contents

Verify external syslog server is configured and online:

show running-config | include logging host

If there is no output or the host displayed is unreachable, this is a finding.

Vulnerability Number

V-273832

Documentable

False

Rule Version

RCKS-NDM-000880

Severity Override Guidance

Verify external syslog server is configured and online:

show running-config | include logging host

If there is no output or the host displayed is unreachable, this is a finding.

Check Content Reference

Target Key

5695