Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The application server must automatically record an event in the device audit log each time the server is started.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35221 | SRG-APP-000130-AS-000089 | SV-46508r1_rule | Medium |
| Description |
|---|
| If the auditing subsystem is not automatically started when the application server is started, security-related events could go unnoticed. The AS auditing subsystem must automatically start when the AS processes are started. |
| STIG | Date |
|---|---|
| Application Server Security Requirements Guide | 2013-01-08 |
Details
| Check Text ( C-43593r1_chk ) |
|---|
| Check the AS documentation and logs to determine if the auditing subsystem starts automatically when the AS processes are started. If the AS is not configured to automatically start auditing processes, this is a finding. |
| Fix Text (F-39767r1_fix) |
|---|
| Configure the AS to automatically start auditing processes when the AS is started. |