Cisco ISE NAC STIG Version Comparison

There are 3 differences between versions v2 r1 (July 24, 2024) (the "left" version) and v2 r3 (Jan. 5, 2026) (the "right" version).

Check CSCO-NC-000190 was removed from the benchmark in the "right" version. The text below reflects the old wording.

This check's original form is available here.

Title

The Cisco ISE must off-load log records onto a different system. This is required for compliance with C2C Step 1.

Check Content

If DoD is not at C2C Step 1 or higher, this is not a finding. Navigate to Administration >> System >> Backup and Restore. Ensure that operational data backups are scheduled. If operational backups are not scheduled, this is a finding.

Discussion

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. This does not apply to audit logs generated on behalf of the device itself (management).

Fix

From the Web Admin portal: 1. Navigate to Administration >> System >> Backup and Restore. 2. Select the "Schedule" option next to Operational Data Backup. 3. Configure operational data backup at a desired frequency.