STIGQter: STIG Summary: Web Server Security Requirements Guide Version: 2 Release: 3 Benchmark Date: 26 Apr 2019:

The web server must generate log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

DISA Rule

SV-70233r2_rule

Vulnerability Number

V-55979

Group Title

SRG-APP-000374-WSR-000172

Rule Version

SRG-APP-000374-WSR-000172

Severity

CAT II

CCI(s)

• CCI-001890 - The information system records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

Weight

10

Fix Recommendation

Configure the web server to store log data time stamps in a format that is mapped to UTC or GMT time.

Check Contents

Review the web server documentation and configuration to determine the time stamp format for log data.

If the time stamp is not mapped to UTC or GMT time, this is a finding.

Vulnerability Number

V-55979

Documentable

False

Rule Version

SRG-APP-000374-WSR-000172

Severity Override Guidance

Review the web server documentation and configuration to determine the time stamp format for log data.

If the time stamp is not mapped to UTC or GMT time, this is a finding.

Check Content Reference

M

Target Key

2557

Comments