STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must be configured to send log data to at least two central log servers for the purpose of forwarding alerts to the administrators and the information system security officer (ISSO).

DISA Rule

SV-273839r1110834_rule

Vulnerability Number

V-273839

Group Title

SRG-APP-000516-NDM-000350

Rule Version

RCKS-NDM-000960

Severity

CAT I

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure two or more logging hosts:

SSH@ICX(config)# logging host x.x.x.x
SSH@ICX(config)# logging host y.y.y.y

Check Contents

Verify logging is enabled:

SSH@ICX(config)# show running-config | include logging
logging console
logging persistence
logging cli-command
logging host x.x.x.x
logging host y.y.y.y

If the site does not have two or more logging hosts, this is a finding.

Vulnerability Number

V-273839

Documentable

False

Rule Version

RCKS-NDM-000960

Severity Override Guidance

Verify logging is enabled:

SSH@ICX(config)# show running-config | include logging
logging console
logging persistence
logging cli-command
logging host x.x.x.x
logging host y.y.y.y

If the site does not have two or more logging hosts, this is a finding.

Check Content Reference

M

Target Key

5695