← Back to Omnissa Horizon Connection Server Security Technical Implementation Guide

V-286731

CAT II (Medium)

The Horizon Connection Server must be configured to use debug level logging.

Rule ID

SV-286731r1291356_rule

STIG

Omnissa Horizon Connection Server Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000067

Discussion

To ensure that all security-relevant information and events are logged, the Horizon Connection Server must be configured to the "debug" logging level. This is the default value, but because it can be changed to other levels, this configuration must be verified and maintained.

Check Content

1. On the Horizon Connection Server, launch the Registry Editor.

2. Traverse the registry tree to "HKEY_LOCAL_MACHINE\Software\Omnissa\Horizon".

3. Locate the "DebugEnabled" key.

If "DebugEnabled" does not exist, this is a finding.

If "DebugEnabled" exists and does not have a value of "true", this is a finding.

Fix Text

1. On the Horizon Connection Server, open the Start menu.

2. Find and launch the "Set Horizon Connection Server Log Levels" shortcut. The precise location will vary depending on the Windows Server version and Start menu options.

3. In the resulting command window, select option 2, "View Debug".

4. Press any key to exit the command prompt window.