UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The UEM server must, at a minimum, off-load audit logs of interconnected systems in real time and off-load standalone systems weekly.


Overview

Finding ID Version Rule ID IA Controls Severity
V-234665 SRG-APP-000515-UEM-000390 SV-234665r961860_rule Medium
Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. Satisfies:FMT_SMF.1.1(2) c.8, FAU_STG_EXT.1.1(1) Reference:PP-MDM-411054
STIG Date
Unified Endpoint Management Server Security Requirements Guide 2024-07-02

Details

Check Text ( C-37850r851724_chk )
Verify the UEM server, at a minimum, off-loads audit logs of interconnected systems in real time and off-load standalone systems weekly.

If the UEM server does not off-load audit logs of interconnected systems in real time and off-load standalone systems weekly, this is a finding.
Fix Text (F-37815r615630_fix)
Configure the UEM server to, at a minimum, off-load audit logs of interconnected systems in real time and off-load standalone systems weekly.