STIGQter: STIG Summary: SPEC Innovations Innoslate 4.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 08 Sep 2022:

Innoslate must off-load audit records onto a different system or media than the system being audited.

DISA Rule

SV-254095r845261_rule

Vulnerability Number

V-254095

Group Title

SRG-APP-000358

Rule Version

SPEC-IN-000720

Severity

CAT II

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

1. Access the logging.properties file in the logs directory of the Innoslate files.
2. Set the ____.apache.juli.AsyncFileHandler.directory fields to the directory or directories required.
3. Save.
4. Restart the service.

Check Contents

1. Access the logging.properties file in the logs directory of the Innoslate files.
2. Verify the ____.apache.juli.AsyncFileHandler.directory field is set to a directory on a different system. Otherwise, this is a finding.

Vulnerability Number

V-254095

Documentable

False

Rule Version

SPEC-IN-000720

Severity Override Guidance

1. Access the logging.properties file in the logs directory of the Innoslate files.
2. Verify the ____.apache.juli.AsyncFileHandler.directory field is set to a directory on a different system. Otherwise, this is a finding.

Check Content Reference

M

Target Key

5481