UCF STIG Viewer Logo

The Apache web server must be configured to provide clustering.


Overview

Finding ID Version Rule ID IA Controls Severity
V-214381 AS24-W2-000560 SV-214381r397738_rule Medium
Description
The web server may host applications that display information that cannot be disrupted, such as information that is time critical or life threatening. In these cases, a web server that shuts down or ceases to be accessible when there is a failure is not acceptable. In these types of cases, clustering of web servers is used. Clustering of multiple web servers is a common approach to providing fail-safe application availability. To ensure application availability, the web server must provide clustering or some form of failover functionality. Satisfies: SRG-APP-000225-WSR-000141, SRG-APP-000356-WSR-000007
STIG Date
Apache Server 2.4 Windows Site Security Technical Implementation Guide 2021-09-27

Details

Check Text ( C-15592r277884_chk )
Review the <'INSTALLED PATH'>\conf\httpd.conf file.

Verify the "mod_proxy" is loaded.

If it does not exist, this is a finding.

If the "mod_proxy" module is loaded and the "ProxyPass" directive is not configured, this is a finding.
Fix Text (F-15590r277885_fix)
Edit the <'INSTALLED PATH'>\conf\httpd.conf file and load the "mod_proxy" module.

Set the "ProxyPass" directive.