Skip to content

Application Server Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000391

    Group
  • SRG-APP-000392

    Group
  • The application server must electronically verify Personal Identity Verification (PIV) credentials for access to the management interface.

    The use of Personal Identity Verification (PIV) credentials facilitates standardization and reduces the risk of unauthorized access. PIV credentials are only used in an unclassified environment. ...
    Rule High Severity
  • SRG-APP-000400

    Group
  • The application server must prohibit the use of cached authenticators after an organization-defined time period.

    When the application server is using PKI authentication, a local revocation cache must be stored for instances when the revocation cannot be authenticated through the network, but if cached authent...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules