Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The application server must notify administrative personnel as a group in the event of audit processing failure.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35188 | SRG-APP-000109-AS-000069 | SV-46475r1_rule | Low |
| Description |
|---|
| Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded. To ensure flexibility and ease of use, application servers must be capable of notifying a group of administrative personnel upon detection of an application audit log processing failure. |
| STIG | Date |
|---|---|
| Application Server Security Requirements Guide | 2013-01-08 |
Details
| Check Text ( C-43567r1_chk ) |
|---|
| Review the organization policy and AS configuration settings to determine if the AS is configured to notify a group of administrative personnel when the audit subsystem fails to operate. If policy requires group notification and the AS is not configured to meet this requirement, this is a finding. |
| Fix Text (F-39735r1_fix) |
|---|
| Configure the AS to notify a group of administrative staff when the auditing subsystem fails. |