Rule version HFFS-ND-000127 · STIG v1 · 2026-09-02
Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
Off-loading is a common process in information systems with limited audit storage capacity.
Determine if the HP FlexFabric Switch is configured to use an external syslog server:
[HP] display info-center
Information Center: Enabled Console: Enabled Monitor: Enabled Log host: Enabled Source address interface: M-GigabitEthernet0/0/0 192.168.100.12, port number: 514, host facility: local7 Log buffer: Enabled Max buffer size 1024, current buffer size 512 Current messages 356, dropped messages 0, overwritten messages 0 Log file: Enabled Security log file: Enabled Information timestamp format: Log host: Date Other output destination: Date
If the HP FlexFabric Switch is not configure to use an external syslog server, this is a finding.
Configure the HP FlexFabric Switch to forward its log to an external syslog server:
[HP] info-center loghost 192.168.100.12