STIGQter: STIG Summary: Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must off-load audit records onto a different system or media than the system being audited.

DISA Rule

SV-283784r1203397_rule

Vulnerability Number

V-283784

Group Title

SRG-APP-000515-NDM-000325

Rule Version

NOKI-ND-000850

Severity

CAT II

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure the Nokia router to off-load audit records onto a different system or media than the system being audited.

One option for off-loading audit records onto a different system is syslog. Configure syslog and the log file to be off-loaded to a syslog server as shown below:

- configure log syslog <syslog id>
- address <syslog server ip address>
- level <messages with severity level equal or higher to be reported- recommend warning>
- prefix <prefix message that will show up for each log entry>

Configure the log file that will be off-loaded to syslog server:

- configure log log-id <log id>
- from <select any combination of: main change security or debug>
- to syslog <syslog id>

Check Contents

Check the Nokia router configuration to determine if the device off-loads audit records onto a different system or media than the system being audited.

One option for off-loading audit records onto a different system is syslog. Verify syslog has been configured using the command below:

- show log syslog

If the device does not off-load audit records onto a different system or media, this is a finding.

Vulnerability Number

V-283784

Documentable

False

Rule Version

NOKI-ND-000850

Severity Override Guidance

Check the Nokia router configuration to determine if the device off-loads audit records onto a different system or media than the system being audited.

One option for off-loading audit records onto a different system is syslog. Verify syslog has been configured using the command below:

- show log syslog

If the device does not off-load audit records onto a different system or media, this is a finding.

Check Content Reference

M

Target Key

5744