STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must off-load audit records onto a different system or media than the system being audited.

DISA Rule

SV-80771r1_rule

Vulnerability Number

V-66281

Group Title

SRG-APP-000515-NDM-000325

Rule Version

HFFS-ND-000127

Severity

CAT II

CCI(s)

CCI-001851 - The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited.

Weight

Fix Recommendation

Configure the HP FlexFabric Switch to forward its log to an external syslog server:

[HP] info-center loghost 192.168.100.12

Check Contents

Determine if the HP FlexFabric Switch is configured to use an external syslog server:

[HP] display info-center

Information Center: Enabled
Console: Enabled
Monitor: Enabled
Log host: Enabled
Source address interface: M-GigabitEthernet0/0/0
192.168.100.12,
port number: 514, host facility: local7
Log buffer: Enabled
Max buffer size 1024, current buffer size 512
Current messages 356, dropped messages 0, overwritten messages 0
Log file: Enabled
Security log file: Enabled
Information timestamp format:
Log host: Date
Other output destination: Date

If the HP FlexFabric Switch is not configure to use an external syslog server, this is a finding.

The HP FlexFabric Switch must off-load audit records onto a different system or media than the system being audited.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments