D15362.16 DX70 and DX80 Administrator Guide CE9.13, JUNE 2020.
www.cisco.com — Copyright © 2020 Cisco Systems, Inc. All rights reserved.
65
Cisco Webex DX70 and DX80
Administrator Guide
Set up secure audit logging
About secure audit logging
When audit logging is enabled, all sign in
activity and configuration changes on the
device are recorded.
Use the
Security > Audit > Logging >
Mode
setting to enable audit logging.
Audit logging is disabled by default.
In ExternalSecure audit logging mode
the device sends encrypted audit logs to
an external audit server (syslog server),
which identity must be verified by a
signed certificate.
The signature of the audit server is
verified using the list of pre-installed CA
certificates or the custom CA list.
If the audit server authentication fails, no
audit logs are sent to the external server.
1. Open the
Security
category.
2. Find the
Audit > Server
settings, and enter the
Address
of the audit server.
If you set
PortAssignment
to
Manual
,
you must also enter
a
Port
number for the audit
server.
3. Set
Audit > Logging > Mode
to
ExternalSecure
.
4. Click
Save
for the change to
take effect.
Sign in to the web interface and navigate to
Setup > Configuration
.
The certificate authority (CA) that verifies the certificate
of the audit server must be in the device’s list of trusted
certificate authorities. Otherwise, logs will not be sent to
the external server.
Refer to the
Upload a CA certificate to the device
chapter how to update the list.
Introduction
Configuration
Peripherals
Maintenance
Device settings
Appendices
Configuration
