DISA STIGS Viewer

Finding ID	Version	Rule ID	IA Controls	Severity
V-214381	AS24-W2-000560	SV-214381r961122_rule		Medium

Description

The web server may host applications that display information that cannot be disrupted, such as information that is time critical or life threatening. In these cases, a web server that shuts down or ceases to be accessible when there is a failure is not acceptable. In these types of cases, clustering of web servers is used. Clustering of multiple web servers is a common approach to providing fail-safe application availability. To ensure application availability, the web server must provide clustering or some form of failover functionality. Satisfies: SRG-APP-000225-WSR-000141, SRG-APP-000356-WSR-000007

STIG	Date
Apache Server 2.4 Windows Site Security Technical Implementation Guide	2025-02-12

Check Text (C-15592r277884_chk)

Review the <'INSTALLED PATH'>\conf\httpd.conf file. Verify the "mod_proxy" is loaded. If it does not exist, this is a finding. If the "mod_proxy" module is loaded and the "ProxyPass" directive is not configured, this is a finding.

Fix Text (F-15590r277885_fix)

Edit the <'INSTALLED PATH'>\conf\httpd.conf file and load the "mod_proxy" module. Set the "ProxyPass" directive.