Cisco ASR 1000 Series User Manual

Page 54 of 72
Requirement
Auditable
Events
Additional Audit
Record Contents
Sample Record
command:copy tftp ….
*Jul 10 11:04:09.179: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command:reload
FPT_TST_EXT.
1
Indication that
TSF self-test was
completed.
Any additional
information
generated by the
tests beyond
“success” or
“failure”.
Jan 23 2013 06:53:24.570: %CRYPTO-6-
SELF_TEST_RESULT: Self test info: (Self test
activated by user: admin)
Jan 23 2013 06:53:24.670: %CRYPTO-6-
SELF_TEST_RESULT: Self test info: (Software
checksum ... passed)
FPT_TST_EXT.
2
Failure of self-
test
Reason for failure
(including
identifier of invalid
certificate)
Cause: c3m_set_fips_mode, Fatal Fault, FIPS POST
Failure requested by: Process ID: 147461 (syslogd)
app_name: ssl Process: syslogd
FTA_SSL_EXT.
1
Any attempts at
unlocking of an
[local]
interactive
session.
No additional
information.
In the TOE this is represented by login attempts that
occur after the timeout of a local administrative user.
001383: May 10 18:06:34.091: %SYS-6-
EXEC_EXPIRE_TIMER: (tty 0 (0.0.0.0)) exec-
timeout timer expired for user securityperson
001384: May 10 18:06:34.091: %SYS-6-
EXIT_CONFIG: User securityperson has exited tty
session 0(0.0.0.0)
FTA_SSL.3
The termination
of a remote
session by the
session locking
mechanism.
No additional
information.
Audit record generated when SSH session is
terminated because of idle timeout:
May 29 2012 15:18:00 UTC: %SYS-6-
TTY_EXPIRE_TIMER: (exec timer expired, tty 0
(0.0.0.0)), user admin
FTA_SSL.4
The termination
of an interactive
session.
No additional
information.
 Audit record generate when admin logs out of
CONSOLE.
May 17 2011 16:29:09: %PARSER-5-
CFGLOG_LOGGEDCMD: User:test_admin logged
command:exit
 Audit record generated when the admin logs out
of SSH:
Jun 18 11:17:36.653: SSH0: Session terminated
normally
FTP_ITC.1
Initiation of the
trusted channel.
Termination of
the trusted
channel.
Identification of
the initiator and
target of failed
trusted channels
establishment
attempt.
AUDIT: See logs provided by FCS_IPSEC_EXT.1.

Cisco ASR 1000 Series Specifications

General

Brand	Cisco
Model	ASR 1000 Series
Category	Network Router
Language	English