STIGQter: STIG Summary: Application Server Security Requirements Guide Version: 3 Release: 1 Benchmark Date: 23 Oct 2020:

The application server must be configured to fail over to another system in the event of log subsystem failure.

DISA Rule

SV-204730r508029_rule

Vulnerability Number

V-204730

Group Title

SRG-APP-000109

Rule Version

SRG-APP-000109-AS-000070

Severity

CAT II

CCI(s)

• CCI-000140 - The information system takes organization-defined actions upon audit failure (e.g., shut down information system, overwrite oldest audit records, stop generating audit records).

Weight

10

Fix Recommendation

If the system MAC level and availability do not require redundancy, this requirement is NA.

Configure the application server to fail over to another system which can handle log functions when the logging subsystem fails.

Check Contents

If the system MAC level and availability do not require redundancy, this requirement is NA.

Review the system's accreditation documentation to determine system MAC and confidentiality requirements. Review application server configuration settings to determine if the application server is configured to fail over operation to another system when the log subsystem fails to operate.

If the system MAC level requires redundancy and the application server is not configured to fail over to another system which can handle application and log functions when a log subsystem failure occurs, this is a finding.

Vulnerability Number

V-204730

Documentable

False

Rule Version

SRG-APP-000109-AS-000070

Severity Override Guidance

If the system MAC level and availability do not require redundancy, this requirement is NA.

Review the system's accreditation documentation to determine system MAC and confidentiality requirements. Review application server configuration settings to determine if the application server is configured to fail over operation to another system when the log subsystem fails to operate.

If the system MAC level requires redundancy and the application server is not configured to fail over to another system which can handle application and log functions when a log subsystem failure occurs, this is a finding.

Check Content Reference

M

Target Key

2900

Comments