STIGQter: STIG Summary: VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

HAProxy must use the httplog option.

DISA Rule

SV-99845r1_rule

Vulnerability Number

V-89195

Group Title

SRG-APP-000374-WSR-000172

Rule Version

VRAU-HA-000380

Severity

CAT II

CCI(s)

• CCI-001890 - The information system records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

Weight

10

Fix Recommendation

Navigate to and open /etc/haproxy/haproxy.cfg

Navigate to the defaults section.

Add "option httplog" to the "defaults" section.

Check Contents

At the command prompt, execute the following command:

grep -E 'option\s+httplog' /etc/haproxy/haproxy.cfg

If the command does not return a line, this is a finding.

Vulnerability Number

V-89195

Documentable

False

Rule Version

VRAU-HA-000380

Severity Override Guidance

At the command prompt, execute the following command:

grep -E 'option\s+httplog' /etc/haproxy/haproxy.cfg

If the command does not return a line, this is a finding.

Check Content Reference

M

Target Key

3455

Comments