The application server must take an organization defined list of least-disruptive actions to terminate suspicious events.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35109	SRG-APP-000287-AS-NA	SV-46396r1_rule		Medium

Description
System availability is a key tenet of system security. Organizations need to have the flexibility to be able to define the automated actions taken in response to an identified incident. This includes being able to define a least disruptive action that the application takes to terminate suspicious events. A least disruptive action may include initiating a request for human response rather than blocking traffic or disrupting system operation. This requirement applies to intrusion detection and system monitoring applications, not an AS.

Description

System availability is a key tenet of system security. Organizations need to have the flexibility to be able to define the automated actions taken in response to an identified incident. This includes being able to define a least disruptive action that the application takes to terminate suspicious events. A least disruptive action may include initiating a request for human response rather than blocking traffic or disrupting system operation. This requirement applies to intrusion detection and system monitoring applications, not an AS.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43497r1_chk )
This requirement is NA for the AS SRG.

Fix Text (F-39661r1_fix)
The requirement is NA. No fix is required.