JBOS-AS-000225 - Google Analytics must be disabled in EAP Console.

Information

The Google Analytics feature aims to help Red Hat EAP team understand how customers are using the console and which parts of the console matter the most to the customers. This information will, in turn, help the team to adapt the console design, features, and content to the immediate needs of the customers.

Sending analytical data to the vendor introduces risk of unauthorized data exfiltration. This capability must be disabled.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Using the EAP web console, log on using admin credentials.
On the bottom right-hand side of the screen, select 'Settings',
uncheck the 'Enable Data Usage Collection' box, and save the configuration.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_JBoss_EAP_6-3_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-213519r954822_rule, STIG-ID|JBOS-AS-000225, STIG-Legacy|SV-76753, STIG-Legacy|V-62263, Vuln-ID|V-213519

Plugin: Unix

Control ID: e985fa2067ea535fa471d8aab68b47d0a7a6b2a6a43be6992b44db5841fcb923