← Back to VMware Horizon 7.13 Connection Server Security Technical Implementation Guide

V-246896

CAT II (Medium)

The Horizon Connection Server must offload events to a central log server in real time.

Rule ID

SV-246896r879731_rule

STIG

VMware Horizon 7.13 Connection Server Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-001851

Discussion

Information system logging capability is critical for accurate forensic analysis. Centralized management of log records provides for efficiency in maintenance and management of records, as well as the backup and archiving of those records. The Horizon Connection Server can be configured to send all events to a syslog receiver. Multiple servers can be configured but only the UDP protocol is supported at this time. Satisfies: SRG-APP-000358-AS-000064, SRG-APP-000515-AS-000203

Check Content

Log in to the Horizon 7 Console. From the left pane, navigate to Settings >> Event Configuration.  The configured syslog servers are located in the right pane under "Syslog". 

If there are no valid syslog servers configured, this is a finding.

Fix Text

Log in to the Horizon 7 Console. From the left pane, navigate to Settings >> Event Configuration. In the right pane, under "Syslog", click "Add". Enter the address of your central log server and configure the port if necessary. Click "OK". Add other servers as necessary.