← Back to Riverbed NetProfiler Security Technical Implementation Guide

V-256092

CAT II (Medium)

The Riverbed NetProfiler must be configured to use redundant Syslog servers that are configured on a different system than the NetProfiler appliance.

Rule ID

SV-256092r961860_rule

STIG

Riverbed NetProfiler Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-001851

Discussion

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Offloading is a common process in information systems with limited audit storage capacity.

Check Content

Go to Administration >> General Settings. 

Under "Syslog", verify the entries for Server 1 Host and Server 2 Host are configured. 

Verify "Audit Trail" and "Events" are selected for each Syslog server. 

If this is not true, this is a finding.

Fix Text

Go to Administration >> General Settings. 

Configure the entry for Server 1 Host. 

Configure the entry for Server 2 Host. 

Check "Audit Trail" and "Events" for each configured server.