Hardware manual

Version 1.1, 03/31/2015

Requirement

Auditable Events

Additional

Audit Record

Contents

Guidance Location

SSL Syslog server ip-address:portnum is

now disconnected

FIPS Guide

Logging CLI_CMD operation enabled by user

from console session.

"logging cli-command" by user from console

Note: All CLI commands are recorded with

the CLI_CMD event type

User Account creation and

password management

Administration Guide, Appendix A

Informational Message

Security user username added | deleted |

modified

A user created, modified, or deleted a local

user account through the Web, SNMP,

console, SSH, or Telnet session

Security Enable super | port-config |

read-only password deleted | added |

modified from console | telnet | ssh | web

| snmp

Line password deleted | added | modified

from console | telnet | ssh | web | snmp

A user created, re-configured, or deleted an

Enable or Line password through the Web,

SNMP, console, SSH, or Telnet session

(time restrictions, minimum

password length)

The CLI_CMD event type records all

administrator commands from the CLI

interface. All login policy changes are

recorded using this event type

Enabling FIPS mode

The CLI_CMD event type records all

administrator commands from the CLI

interface. Changes to the FIPS mode are

recorded using this event type

The following commands (more or less in the order they appear in the Detailed Test Report (DTR)) were identified

by the evaluators as security-related. Each command is identified and a brief purpose is provided. These

commands were found in the user guidance and consist of all the commands needed to configure or examine the