V-12020

CAT II (Medium)

The system must not be used as a syslog server (loghost) for systems external to the enclave.

Rule ID

SV-45984r1_rule

STIG

Version

V1R12

CCIs

Syslog messages are typically unencrypted, may contain sensitive information, and are restricted to the enclave.

Ask the SA if the loghost server is collecting data for hosts outside the local enclave. If it is, this is a finding.

Configure the hosts outside of the local enclave to not log to this system.