STIGQter STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric switch must be configured to send log data to a syslog server for the purpose of forwarding alerts to the administrators and the ISSO.

DISA Rule

SV-80789r1_rule

Vulnerability Number

V-66299

Group Title

SRG-APP-000516-NDM-000341

Rule Version

HFFS-ND-000142

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to send a notification message to the to the syslog server when accounts are created.

[HP] info-center loghost 192.168.16.102

Check Contents

Determine if the HP FlexFabric Switch generates alerts that can be forwarded to the administrators and ISSO when accounts are created.

[HP] display info-center

Information Center: Enabled
Console: Enabled
Monitor: Enabled
Log host: Enabled
Source address interface: GigabitEthernet0/1
192.168.16.102,
port number: 514, host facility: local7

If the HP FlexFabric Switch is configured to use an authentication server which would perform this function, this is not a finding.

If alerts are not generated when accounts are created and forwarded to the administrators and ISSO, this is a finding.

Vulnerability Number

V-66299

Documentable

False

Rule Version

HFFS-ND-000142

Severity Override Guidance

Determine if the HP FlexFabric Switch generates alerts that can be forwarded to the administrators and ISSO when accounts are created.

[HP] display info-center

Information Center: Enabled
Console: Enabled
Monitor: Enabled
Log host: Enabled
Source address interface: GigabitEthernet0/1
192.168.16.102,
port number: 514, host facility: local7

If the HP FlexFabric Switch is configured to use an authentication server which would perform this function, this is not a finding.

If alerts are not generated when accounts are created and forwarded to the administrators and ISSO, this is a finding.

Check Content Reference

M

Target Key

2971

Comments