Network Infrastructure Policy Security Technical Implementation Guide

The Network Infrastructure Policy Security Technical Implementation Guide (V10 R7) has 67 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

67STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V10 · R7

CurrentPublished Thu Oct 24 2024

A minimum of two syslog servers must be deployed in the management network.

Network Infrastructure Policy Security Technical Implementation Guide

Assessment Title

Rule Text

A minimum of two syslog servers must be deployed in the management network.

Description

Discussion Text

Maintaining an audit trail of system activity logs can help identify configuration errors, understand past intrusions, troubleshoot service disruptions, and react to probes and scans of the network.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251373

Rule

SV-251373r916119_rule

Severity

low

Rule Version

NET1025

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the network topology and verify that at least two syslog servers are located within the management network. Note the IP addresses as documented on the management network topology and verify that this is what is configured on the network elements as the host devices for sending syslog data.

If a minimum of two syslog servers have not been deployed in the management network, this is a finding.

Implementation Procedure

Fix Text

Stand up at least two syslog servers and connect them to the management network. Configure all managed network elements to send syslog data to the syslog servers.

STIG check 41 of 67 in the Network Infrastructure Policy STIG checklist

← Previous · V-251372A dedicated management network must be implemented.Next · V-251374 →Syslog messages must be retained for a minimum of 30 days online and then stored offline for one year.