V-217478

Discussion

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.

Check Content

Determine if the HP FlexFabric Switch is configured to use an external syslog server:

[HP] display info-center

Information Center: Enabled
Console: Enabled
Monitor: Enabled
Log host: Enabled
    Source address interface: M-GigabitEthernet0/0/0
    192.168.100.12,
    port number: 514, host facility: local7
 Log buffer: Enabled
    Max buffer size 1024, current buffer size 512
    Current messages 356, dropped messages 0, overwritten messages 0
Log file: Enabled
Security log file: Enabled
Information timestamp format:
    Log host: Date
    Other output destination: Date

If the HP FlexFabric Switch is not configure to use an external syslog server, this is a finding.