The application server must provide a clustering capability.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35424	SRG-APP-000225-AS-000154	SV-46711r1_rule		Medium

Description
Failure to a known secure state helps prevent a loss of confidentiality, integrity, or availability in the event of a failure of the information system or a component of the system. When application failure is encountered, preserving application state facilitates application restart and return to the operational mode of the organization with less disruption of mission/business processes. Clustering of multiple application servers is a common approach to providing fail safe application availability. To assure application availability, the AS must provide clustering or some form of fail-over functionality.

Description

Failure to a known secure state helps prevent a loss of confidentiality, integrity, or availability in the event of a failure of the information system or a component of the system. When application failure is encountered, preserving application state facilitates application restart and return to the operational mode of the organization with less disruption of mission/business processes. Clustering of multiple application servers is a common approach to providing fail safe application availability. To assure application availability, the AS must provide clustering or some form of fail-over functionality.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43775r1_chk )
Review the AS configuration and documentation to ensure the application server is configured to provide clustering functionality. If the AS is not configured to provide clustering or some form of fail-over functionality, this is a finding.

Fix Text (F-39968r1_fix)
Configure the AS to provide application failover or participate in an application cluster which provides failover.