Skip to content

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000505-AS-000230

    Group
  • JBoss must be configured to generate log records that show starting and ending times for access to the application server management interface.

    Determining when a user has accessed the management interface is important to determine the timeline of events when a security incident occurs. Generating these events, especially if the managemen...
    Rule Medium Severity
  • SRG-APP-000506-AS-000231

    Group
  • JBoss must be configured to generate log records when concurrent logons from different workstations occur to the application server management interface.

    Concurrent logons from different systems could possibly indicate a compromised account. When concurrent logons are made from different workstations to the management interface, a log record needs ...
    Rule Medium Severity
  • SRG-APP-000509-AS-000234

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules