Ensure 'logging' is enabled

Information

Enables logging

Rationale:

Logging is fundamental for audit requirements and incident management and should be enabled on any business critical system storing or conveying information

Solution

Firepower Device Manager:

Use Objects > Syslog Servers and Device > System Settings > Logging Settings.

or

Firepower Management Center:

Device > Platform Setting > Threat Defense Policy > Syslog > Syslog Settings

See Also

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623.html

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12c.

Plugin: Cisco

Control ID: 4d8728c0e068a5ac47904838c09aae7836f197a7e45c33631ab2719d60847a19