Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The application server must be configured to remotely view all content related to an established administrative user session in real time.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35157 | SRG-APP-000094-AS-000055 | SV-46444r1_rule | Low |
| Description |
|---|
| User sessions for an application server are in the context of server management only. The application server must be configured to log all administrative session data to a remote location for viewing. |
| STIG | Date |
|---|---|
| Application Server Security Requirements Guide | 2013-01-08 |
Details
| Check Text ( C-43541r3_chk ) |
|---|
| Review the AS configuration to determine if the AS is configured to capture/record and log all content related to an administrator session. Have an administrator log into the server and make several security relevant configuration changes and verify these changes were recorded in an audit log that can be remotely viewed. If these requirements are not met, this is a finding. |
| Fix Text (F-39707r2_fix) |
|---|
| Configure the AS to capture/record and log all content related to an administrator session and enable secured remote viewing of log data. |