Ensure 'logging with timestamps' is enabled - show logging

Information

Allows the timestamp to logs generated

Rationale:

Enabling timestamps, to mark the generation time of log messages, reduces the complexity of correlating events and tracing network attacks across multiple devices by providing a holistic view of events thus enabling faster troubleshooting of issues and analysis of incidents.

Solution

Firepower Management Center:

Devices > Platform settings > Syslog > Logging setup

or

Firepower Management Center:

Device > Platform Setting > Threat Defense Policy > Syslog > Syslog Settings

See Also

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/hardening/ftd/FTD_Hardening_Guide_v64.html

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12c.

Plugin: Cisco_Firepower

Control ID: 69b826f017c60a9d78ac3b0023c03eed748e138859eafe460acb58b9fada6343