The MDM server must provide a real-time alert when organization defined audit failure events occur.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36299	SRG-APP-104-MDM-256-SRV	SV-47703r1_rule		Low

Description
It is critical for the appropriate personnel to be aware if a system is at risk of failing due to an audit failure event. Notification of the event will allow administrators to take actions so logs are not lost.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44540r1_chk )
Review the configuration settings to determine whether the MDM server audit system provides a real-time alert when organization defined audit failure events occur. Review MDM server documentation. If designated alerts are not sent, this is a finding.

Fix Text (F-40830r1_fix)
Configure the MDM server to provide a real-time alert when organization defined audit failure events occur.