← Back to Omnissa WS1 UEM Server Security Technical Implementation Guide

V-284306

CAT II (Medium)

The Omnissa WS1 UEM server must be configured to record time stamps for audit records in Coordinated Universal Time (UTC).

Rule ID

SV-284306r1224049_rule

STIG

Omnissa WS1 UEM Server Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-001890 CCI-001889

Discussion

If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis. Time stamps generated by the application include date and time. Time is commonly expressed in UTC, a modern continuation of GMT, or local time with an offset from UTC. Satisfies: FAU_GEN.1.2(1) Satisfies: SRG-APP-000374-UEM-000244, SRG-APP-000375-UEM-000245

Check Content

Authenticate to the Workspace ONE UEM console as an administrator. 
 
Navigate to Groups & Settings >> All Settings >> System >> Enterprise Integration >> Syslog. 
 
If "Syslog Format" is not set to "RFC-5424 Format", this is a finding.

Fix Text

Authenticate to the Workspace ONE UEM console as an administrator. 
 
Navigate to Groups & Settings >> All Settings >> System >> Enterprise Integration >> Syslog. 
 
Next to "Syslog Format" select "RFC-5424 Format" from the drop-down menu. Click "Save".