The MDM server must provide a warning when allocated audit record storage volume reaches an organization defined percentage of maximum audit record storage capacity.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36296	SRG-APP-103-MDM-255-SRV	SV-47700r1_rule		Low

Description
It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs when storage capacity is reached. Notification of the storage condition will allow administrators to take actions so that logs are not lost.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44537r1_chk )
Review the configuration settings to determine whether the MDM server audit system provides a warning when allocated audit record storage volume reaches an organization defined percentage of maximum audit record storage capacity. If designated alerts are not sent, this is a finding.

Fix Text (F-40827r1_fix)
Configure the MDM server to provide a warning when allocated audit record storage volume reaches an organization defined percentage of maximum audit record storage capacity.