← Back to Web Server Security Requirements Guide

V-264339

CAT II (Medium)

The web server must implement the capability to centrally review and analyze audit records from multiple components within the system.

Rule ID

SV-264339r984362_rule

STIG

Web Server Security Requirements Guide

Version

V4R4

CCIs

CCI-003821

Discussion

Automated mechanisms for centralized reviews and analyses include security information and event management products.

Check Content

Verify the web server is configured to implement the capability to centrally review and analyze audit records from multiple components within the system.

If the web server is not configured to implement the capability to centrally review and analyze audit records from multiple components within the system, this is a finding.

Fix Text

Configure the web server to implement the capability to centrally review and analyze audit records from multiple components within the system.