Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Web Server Security Requirements Guide

The Web Server Security Requirements Guide (V4 R5) has 126 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

126STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V4 · R5

CurrentPublished Wed Jul 01 2026

The web server must record time stamps for log records to a minimum granularity of one second.

Web Server Security Requirements Guide

Assessment Title

Rule Text

Description

Discussion Text

Without sufficient granularity of time stamps, it is not possible to adequately determine the chronological order of records.

Time stamps generated by the web server include date and time and must be to a granularity of one second.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-206426

Rule

SV-206426r961446_rule

Severity

medium

Rule Version

SRG-APP-000375-WSR-000171

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the web server documentation and configuration to determine if log records are time stamped to a minimum granularity of one second.

Have a user generate a logable event and review the log data to determine if the web server is configured correctly.

If the log data does not contain a time stamp to a minimum granularity of one second, this is a finding.

Implementation Procedure

Fix Text

Configure the web server to record log events with a time stamp to a granularity of one second.

STIG check 75 of 126 in the Web Server Security Requirements Guide checklist

← Previous · V-206425The web server must generate log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).Next · V-206427 →The web server application, libraries, and configuration files must only be accessible to privileged users.