The Omnissa WS1 UEM server must be configured to record time stamps for audit records in Coordinated Universal Time (UTC).
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-284306 | SRG-APP-000374-UEM-000244 | OMW1-00-006600 | SV-284306r1224049_rule | 2026-06-15 | 1 |
Description
If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis.
Time stamps generated by the application include date and time. Time is commonly expressed in UTC, a modern continuation of GMT, or local time with an offset from UTC.
Satisfies: FAU_GEN.1.2(1)
Satisfies: SRG-APP-000374-UEM-000244, SRG-APP-000375-UEM-000245
ℹ️ Check
Authenticate to the Workspace ONE UEM console as an administrator.
Navigate to Groups & Settings >> All Settings >> System >> Enterprise Integration >> Syslog.
If "Syslog Format" is not set to "RFC-5424 Format", this is a finding.
✔️ Fix
Authenticate to the Workspace ONE UEM console as an administrator.
Navigate to Groups & Settings >> All Settings >> System >> Enterprise Integration >> Syslog.
Next to "Syslog Format" select "RFC-5424 Format" from the drop-down menu. Click "Save".