Deleting Audit Records - Cisco ASR 1000 Series Common Criteria Operational User Guidance And Preparative Procedures

Requirement
FTA_SSL.3: TSF-initiated
termination
FTA_SSL.4: User-initiated
termination
FTA_TAB.1: Default TOE
access banners
FTP_ITC.1: Inter-TSF
trusted channel
FTP_TRP.1: Trusted path

5.1 Deleting Audit Records

The TOE provides the privileged Administrator the ability to delete audit records stored within
the TOE.
This is done with the clear logging command. See the [10]
Fundamentals Command References.
Management Action to
Log
Specifying the inactivity
time period.
Logging out of TOE.
Configuring the banner
displayed prior to
authentication.
None
Connecting to the TOE
with SSH.
Sample Log
Feb 15 2013 13:12:25.055: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command: exec-timeout 60
Feb 15 2013 13:12:25.055: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command: exit
Feb 15 2013 13:12:25.055: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command: banner login d This is a banner d
N/A
Jan 17 05:05:49.460: %SEC_LOGIN-5-
LOGIN_SUCCESS: Login Success [user: ranger]
[Source: 21.0.0.3] [localport: 22] at 00:05:49 EST
Thu Jan 17 2013
Cisco IOS Configuration
Page 62 of 72