Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The application server must monitor for unauthorized remote connections to the information system on an organization defined frequency.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35479 | SRG-APP-000018-AS-NA | SV-46766r1_rule | Medium |
| Description |
|---|
| Organizations need to monitor for unauthorized remote access connections to information systems in order to determine if break-in attempts or other unauthorized activity is occurring. There are already other SRG requirements for applications to generate audit connection logs to record connection activity. It is for the organization to determine which of those audited connections is unauthorized. This task is usually handled by the IDS, log alarming, or some other security mechanism specifically designed to automate and address this requirement. This requirement is NA for applications not designed to monitor for unauthorized remote connections to information systems. Applications designed to meet this requirement must be able to do so on an organization defined frequency. The AS is not designed to monitor unauthorized remote connections to information systems. |
| STIG | Date |
|---|---|
| Application Server Security Requirements Guide | 2013-01-08 |
Details
| Check Text ( C-43832r1_chk ) |
|---|
| This requirement is NA for the AS SRG. |
| Fix Text (F-40020r1_fix) |
|---|
| This requirement is NA. No fix is required. |