Configuration management applications must employ automated mechanisms to centrally apply configuration settings.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35582	SRG-APP-000136-AS-NA	SV-46869r1_rule		Medium

Description
Configuration settings are the configurable security-related parameters of information technology products that are part of the information system. Rather than visiting each and every system when making application configuration changes, organizations will employ automated tools that can make changes across all systems. "Centrally apply" means to apply settings from a centralized location. To support this requirement, configuration management applications will employ automated mechanisms to centrally apply configuration settings, and applications in general will ensure they do not hinder the use of such tools. The AS is not a configuration management application. This requirement does not apply.

Description

Configuration settings are the configurable security-related parameters of information technology products that are part of the information system. Rather than visiting each and every system when making application configuration changes, organizations will employ automated tools that can make changes across all systems. "Centrally apply" means to apply settings from a centralized location. To support this requirement, configuration management applications will employ automated mechanisms to centrally apply configuration settings, and applications in general will ensure they do not hinder the use of such tools. The AS is not a configuration management application. This requirement does not apply.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43924r1_chk )
This requirement is NA for the AS SRG.

Fix Text (F-40123r1_fix)
The requirement is NA. No fix is required.