Skip to content

The Dell OS10 Router must be configured to log all packets that have been dropped.

An XCCDF Rule

Description

Auditing and logging are key components of any security architecture. It is essential for security personnel to know what is being done or attempted to be done, and by whom, to compile an accurate risk assessment. Auditing the actions on network devices provides a means to recreate an attack or identify a configuration mistake on the device.

ID
SV-269867r1051986_rule
Version
OS10-RTR-000260
Severity
Low
References
Updated

Remediation Templates

A Manual Procedure

Configure the router to enable audit logging and to log all packets dropped by ACL rules.

OS10(config)# logging audit enable

OS10(config)# ip access-list FILTER_EXTERNAL_INGRESS
OS10(config-ipv4-acl)# permit ...