The Apache web server must be configured to provide clustering.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-214381 | AS24-W2-000560 | SV-214381r961122_rule | CCI-001190 | medium |
| Description | ||||
| The web server may host applications that display information that cannot be disrupted, such as information that is time critical or life threatening. In these cases, a web server that shuts down or ceases to be accessible when there is a failure is not acceptable. In these types of cases, clustering of web servers is used. Clustering of multiple web servers is a common approach to providing fail-safe application availability. To ensure application availability, the web server must provide clustering or some form of failover functionality. Satisfies: SRG-APP-000225-WSR-000141, SRG-APP-000356-WSR-000007 | ||||
| STIG | Date | |||
| Apache Server 2.4 Windows Site Security Technical Implementation Guide | 2025-02-12 | |||
Related Frameworks
2 paths across 2 frameworks
Related Frameworks
NIST 800-531 mapping
SC-24
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-001190
1.00
- DISA · 2 · disa_xccdf · related
Details
Check Text (C-214381r961122_chk)
Review the <'INSTALLED PATH'>\conf\httpd.conf file.
Verify the "mod_proxy" is loaded.
If it does not exist, this is a finding.
If the "mod_proxy" module is loaded and the "ProxyPass" directive is not configured, this is a finding.
Fix Text (F-15590r277885_fix)
Edit the <'INSTALLED PATH'>\conf\httpd.conf file and load the "mod_proxy" module.
Set the "ProxyPass" directive.