Cisco APIC Security Configuration Guide, Release 4.1(x)

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents
Find Matches in This Book
Available Languages
Download Options

Book Title

Cisco APIC Security Configuration Guide, Release 4.1(x)

Chapter Title

Additional ACI Security Features

Results

Updated:
March 28, 2019

Chapter: Additional ACI Security Features

Additional ACI Security Features

This chapter contains the following sections:

Additional Security Features

The following are a list of security features currently supported in ACI but documented in other configuration guides found at https://www.cisco.com/c/en/us/support/cloud-systems-management/application-policy-infrastructure-controller-apic/tsd-products-support-series-home.html:

  • For Contract configuration see the Cisco APIC Basic Configuration Guide, Release 3.x and the Operating Cisco Application Centric Infrastructure.

  • For EPG Communication Rules see the Use vzAny to Automatically Apply Communication Rules to all EPGs in a VRF Knowledge-Based article.

  • For In-Band and Out-of-Band Management Access see the Cisco APIC and Static Management Access Knowledge-Based article, and the Cisco APIC Layer 4 to Layer 7 Services Deployment Guide, Release 2.2(3).

  • For Intra-EPG Isolation Enforcement see the Cisco ACI Virtualization Guide, Release 3.0(1).

  • For Traffic Storm Control see the Cisco APIC Layer 2 Networking Configuration Guide.

Turning Off Generated Session Log Files in APIC

This section describes how turn off the generated logs in APIC. If you have configured any sort of monitoring for your fabric, you will see the following log file:
Body of session record log example:
From-127.0.0.1-client-type-REST-Success

To turn off the generated session log files in APIC, perform the following steps:

Procedure

Step 1

On the menu bar, choose ADMIN > AAA.

Step 2

In the AAA pane, click Security.

Step 3

In the User Management – Security pane, verify that the default Management Settings pane is chosen.

Step 4

In the Include Refresh in Session Records field, uncheck the box to disable the generated session log files.

Step 5

Click Submit.

Step 6

Click Submit Changes.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco