Skip to content

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000334-IDPS-00191

    Group
  • The Cisco ASA must be configured to off-load log records to a centralized log server.

    Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading ensures audit information does not get overwritten if the limited audit storage capa...
    Rule Medium Severity
  • SRG-NET-000113-IDPS-00189

    Group
  • The Cisco ASA must be configured to send log records to the syslog server for specific facility and severity level.

    Without the capability to generate audit records with a severity code it is difficult to track and handle detection events. While auditing and logging are closely related, they are not the same. L...
    Rule Medium Severity
  • SRG-NET-000089-IDPS-00010

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules