← Back to Application Server Security Requirements Guide

V-278964

CAT II (Medium)

The application server must employ automated mechanisms to integrate intrusion detection mechanisms into access control mechanisms.

Rule ID

SV-278964r1137603_rule

STIG

Application Server Security Requirements Guide

Version

V4R4

CCIs

CCI-004969

Discussion

Using automated tools and mechanisms to integrate intrusion detection tools and mechanisms into access mechanisms facilitates a rapid response to attacks by enabling the reconfiguration of mechanisms in support of attack isolation and elimination. This requirement also applies to Zero Trust initiatives.

Check Content

Verify the application server is configured to employ automated mechanisms to integrate intrusion detection mechanisms into access control mechanisms.

If the application server does not employ automated mechanisms to integrate intrusion detection mechanisms into access control mechanisms, this is a finding.

Fix Text

Configure the application server to employ automated mechanisms to integrate intrusion detection mechanisms into access control mechanisms.