1.10.2 Ensure 'logging to monitor' is disabled

Information

Disables the logging to monitor

Rationale:

The ASA by default send logs to monitor for Telnet and SSH sessions. The logs messages will continuously scroll on the monitor after the 'Terminal Monitor' command is issued. This consumes a lot of resources causing high CPU usage and should be avoided.

Solution

Run the following command to disable the logging monitor

hostname(config)#no logging monitor

Default Value:

The logging monitor is disabled by default

See Also

https://workbench.cisecurity.org/benchmarks/7194

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-2, 800-53|AU-7, 800-53|AU-12, CSCv7|11.1

Plugin: Cisco

Control ID: 97a1960348af44fcf396a6a38171c1828e5546d64631c0078b920d7efedaf5be