The HP FlexFabric Switch must generate audit log events for a locally developed list of auditable events.

Auditing and logging are key components of any security architecture. Logging the actions of specific events provides a means to investigate an attack; to recognize resource utilization or capacity thresholds; or to identify an improperly configured network device. If auditing is not comprehensive, it will not be useful for intrusion monitoring, security investigations, and forensic analysis.

Determine if the info-center feature is enabled on the HP FlexFabric Switch:

[HP] display info-center

Information Center: Enabled

If logging is not enabled, this is a finding.

Enable info-center feature on the HP FlexFabric Switch:

[HP] info-center enable

Note: By default, the information center is enabled.