The application server, when a MAC I system, must be in a high-availability (HA) cluster.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-204814	SRG-APP-000435-AS-000069	SV-204814r961620_rule		Medium

Description

A MAC I system is a system that handles data vital to the organization's operational readiness or effectiveness of deployed or contingency forces. A MAC I system must maintain the highest level of integrity and availability. By HA clustering the application server, the hosted application and data are given a platform that is load-balanced and provided high-availability.

STIG	Date
Application Server Security Requirements Guide	2025-02-11

Details

Check Text (C-4934r283083_chk)

If the application server is not a MAC I system, this requirement is NA.

Review the application server documentation and configuration to determine if the application server is part of an HA cluster.

If the application server is not part of an HA cluster, this is a finding.

Fix Text (F-4934r283084_fix)

If the application server is not a MAC I system, this requirement is NA.

Configure the application server to be part of an HA cluster.