The application must enforce configurable traffic volume thresholds representing auditing capacity for network traffic.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36404	SRG-APP-105-NA	SV-47808r1_rule		Medium

Description
It is critical when a system is at risk of failing to process audit logs as required; actions are automatically taken to mitigate the failure. Audit processing failures include: software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded. Rationale for non-applicability: MDM server functionality involves the transfer of small policy and configuration files and other commands, none of which are expected to trigger network volume thresholds. If such protection is desired, it is better performed by the operating system or a network firewall.

Description

It is critical when a system is at risk of failing to process audit logs as required; actions are automatically taken to mitigate the failure. Audit processing failures include: software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded. Rationale for non-applicability: MDM server functionality involves the transfer of small policy and configuration files and other commands, none of which are expected to trigger network volume thresholds. If such protection is desired, it is better performed by the operating system or a network firewall.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44646r1_chk )
This requirement is NA for the MDM server SRG.

Fix Text (F-40936r1_fix)
The requirement is NA. No fix is required.