STIGUI
V-273832CAT II — Medium severitySV-273832r1110849_rule

The RUCKUS ICX device must off-load audit records onto a different system or media than the system being audited.

Rule version RCKS-NDM-000880 · STIG v1 · 2025-05-28

Discussion

Information stored in one location is vulnerable to accidental or incidental deletion or alteration.

Off-loading is a common process in information systems with limited audit storage capacity.

Satisfies: SRG-APP-000515-NDM-000325, SRG-APP-000360-NDM-000295

Check

Verify external syslog server is configured and online:

show running-config | include logging host

If there is no output or the host displayed is unreachable, this is a finding.

Fix

Configure syslog host:

SSH@ICX(config)# logging host x.x.x.x

Identifiers

Group ID
V-273832
Group title
SRG-APP-000515-NDM-000325
Rule ID
SV-273832r1110849_rule
Check ID
C-77923r1110675_chk
Fix ID
F-77828r1110676_fix