The Omnissa WS1 UEM server must be configured to record time stamps for audit records in Coordinated Universal Time (UTC).

If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis.

Time stamps generated by the application include date and time. Time is commonly expressed in UTC, a modern continuation of GMT, or local time with an offset from UTC.

Satisfies: FAU_GEN.1.2(1) Satisfies: SRG-APP-000374-UEM-000244, SRG-APP-000375-UEM-000245

Authenticate to the Workspace ONE UEM console as an administrator.

Navigate to Groups & Settings >> All Settings >> System >> Enterprise Integration >> Syslog.

If "Syslog Format" is not set to "RFC-5424 Format", this is a finding.

Authenticate to the Workspace ONE UEM console as an administrator.

Navigate to Groups & Settings >> All Settings >> System >> Enterprise Integration >> Syslog.

Next to "Syslog Format" select "RFC-5424 Format" from the drop-down menu. Click "Save".