The application server must implement transaction recovery for transaction-based processes.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35241	SRG-APP-000144-AS-000098	SV-46528r1_rule		Low

Description
Transaction rollback and transaction journaling are examples of mechanisms supporting transaction recovery. Use of transactions prevents databases from being left in inconsistent states due to incomplete updates and ensures message delivery, which is a data integrity issue. The application server must provide a transaction recovery capability for hosted applications.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43608r1_chk )
Review the AS documentation and configuration to determine if the AS provides transaction recovery capabilities. If the AS is not configured to meet this requirement, this is a finding.

Fix Text (F-39786r1_fix)
Configure the AS to recover transactions.