06-02-2009 11:18 AM - edited 03-10-2019 04:38 AM
Hi,
How can the login and command history/log along with timestamp be configured on IDSM modules.
Regards.
06-02-2009 12:33 PM
I'm sorry to tell you it can't be configured because that feature doesn;t exist. There is an event generated when a user logs in that can be seen in the event database, aong with a boatload of other system events (show events past 23:59), but no command history logs.
For a security device, it has very little security in and of itself. No AAA, multiple logins on the same username permitted, no forced password change (unless you count the default password).
06-02-2009 10:46 PM
The modules don't support AAA, therefore they cannot do any 'accounting'. Syslogs are not supported either.
You might be able to get this information from the UNIX backend (regarding who is logging in, and not the commands). But this would not be reocmmended, and perhaps not supported by TAC.
Regards
Farrukh
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide