Skip to main content
CUI

STIG Rule - V-204814

V-204814

SV-204814r961620_rule

CAT II

The application server, when a MAC I system, must be in a high-availability (HA) cluster.

From: Application Server Security Requirements Guide (V4R4)

Description

<VulnDiscussion>A MAC I system is a system that handles data vital to the organization's operational readiness or effectiveness of deployed or contingency forces. A MAC I system must maintain the highest level of integrity and availability. By HA clustering the application server, the hosted application and data are given a platform that is load-balanced and provided high-availability.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

Check Procedure

If the application server is not a MAC I system, this requirement is NA. Review the application server documentation and configuration to determine if the application server is part of an HA cluster. If the application server is not part of an HA cluster, this is a finding.

Fix Text

If the application server is not a MAC I system, this requirement is NA. Configure the application server to be part of an HA cluster.

CCI Reference

CCI-002385
Created
2026-04-07 20:08:11
Last Updated
2026-04-07 20:08:11
CUI