The Apache web server must be configured to provide clustering.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-214381 | AS24-W2-000560 | SV-214381r961122_rule | CCI-001190 | medium |
| Description | ||||
| The web server may host applications that display information that cannot be disrupted, such as information that is time critical or life threatening. In these cases, a web server that shuts down or ceases to be accessible when there is a failure is not acceptable. In these types of cases, clustering of web servers is used. Clustering of multiple web servers is a common approach to providing fail-safe application availability. To ensure application availability, the web server must provide clustering or some form of failover functionality. Satisfies: SRG-APP-000225-WSR-000141, SRG-APP-000356-WSR-000007 | ||||
| STIG | Date | |||
| Apache Server 2.4 Windows Site Security Technical Implementation Guide | 2025-02-12 | |||
Details
Check Text (C-214381r961122_chk)
Review the <'INSTALLED PATH'>\conf\httpd.conf file.
Verify the "mod_proxy" is loaded.
If it does not exist, this is a finding.
If the "mod_proxy" module is loaded and the "ProxyPass" directive is not configured, this is a finding.
Fix Text (F-15590r277885_fix)
Edit the <'INSTALLED PATH'>\conf\httpd.conf file and load the "mod_proxy" module.
Set the "ProxyPass" directive.