STIGQter: STIG Summary: VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The HAProxy baseline must be documented and maintained.

DISA Rule

SV-99821r1_rule

Vulnerability Number

V-89171

Group Title

SRG-APP-000225-WSR-000074

Rule Version

VRAU-HA-000275

Severity

CAT II

CCI(s)

• CCI-001190 - The information system fails to an organization-defined known-state for organization-defined types of failures.

Weight

10

Fix Recommendation

Develop, document, and implement baseline procedures that include all HAProxy software files and directories.

Update the baseline after new installations, upgrades, or maintenance activities that include changes to the software baseline.

Check Contents

Have the appliance administrator and/or ISSO provide the HAProxy software baseline procedures, implementation evidence, and a list of files and directories included in the baseline procedure for completeness.

If baseline procedures do not exist, not implemented reliably, or are not complete, this is a finding.

Vulnerability Number

V-89171

Documentable

False

Rule Version

VRAU-HA-000275

Severity Override Guidance

Have the appliance administrator and/or ISSO provide the HAProxy software baseline procedures, implementation evidence, and a list of files and directories included in the baseline procedure for completeness.

If baseline procedures do not exist, not implemented reliably, or are not complete, this is a finding.

Check Content Reference

M

Target Key

3455

Comments