STIGQter: STIG Summary: VMware vRealize Operations Manager 6.x tc Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

tc Server ALL log files must be moved to a permanent repository in accordance with site policy.

DISA Rule

SV-99689r1_rule

Vulnerability Number

V-89039

Group Title

SRG-APP-000358-WSR-000163

Rule Version

VROM-TC-000790

Severity

CAT II

CCI(s)

• CCI-001851 - The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited.

Weight

10

Fix Recommendation

Develop and enforce a site policy for moving log files periodically from the web server to a permanent repository in accordance with site retention policies.

Check Contents

Obtain supporting documentation from the ISSO.

Review the site policy for moving log files from the web server to a permanent repository. Ensure that log files are being moved from the web server in accordance with the site policy.

If the site does not have a policy for periodically moving log files to an archive repository or such policy is not being enforced, this is a finding.

Vulnerability Number

V-89039

Documentable

False

Rule Version

VROM-TC-000790

Severity Override Guidance

Obtain supporting documentation from the ISSO.

Review the site policy for moving log files from the web server to a permanent repository. Ensure that log files are being moved from the web server in accordance with the site policy.

If the site does not have a policy for periodically moving log files to an archive repository or such policy is not being enforced, this is a finding.

Check Content Reference

M

Target Key

3441

Comments