The application must monitor for unauthorized remote connections to the information system on an organization defined frequency.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36396	SRG-APP-018-NA	SV-47800r1_rule		Medium

Description
Organizations need to monitor for unauthorized remote access connections to information systems in order to determine if break-in attempts or other unauthorized activity is occurring. There are already other SRG requirements for applications to generate audit connection logs to record connection activity. It is for the organization to determine which of those audited connections is unauthorized. Rationale for non-applicability: This requirement is better managed by the operating system.

Description

Organizations need to monitor for unauthorized remote access connections to information systems in order to determine if break-in attempts or other unauthorized activity is occurring. There are already other SRG requirements for applications to generate audit connection logs to record connection activity. It is for the organization to determine which of those audited connections is unauthorized. Rationale for non-applicability: This requirement is better managed by the operating system.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44638r1_chk )
This requirement is NA for the MDM server SRG.

Fix Text (F-40928r1_fix)
The requirement is NA. No fix is required.