IBM WebSphere Traditional V9.x Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000428-AS-000265
<GroupDescription></GroupDescription>Group -
The WebSphere Application Server must not generate LTPA keys automatically.
<VulnDiscussion>Automated LTPA key generation can create unplanned outages. Plan to change your LTPA keys during a scheduled outage. Distribu...Rule Low Severity -
SRG-APP-000428-AS-000265
<GroupDescription></GroupDescription>Group -
The WebSphere Application Server must periodically regenerate LTPA keys.
<VulnDiscussion>The encryption of authentication information that is exchanged between servers involves the Lightweight Third-Party Authentic...Rule Low Severity -
SRG-APP-000435-AS-000163
<GroupDescription></GroupDescription>Group -
The WebSphere Application Server high availability applications must be installed on a cluster.
<VulnDiscussion>DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot ac...Rule Medium Severity -
SRG-APP-000435-AS-000163
<GroupDescription></GroupDescription>Group -
The WebSphere Application Server memory session settings must be defined according to application load requirements.
<VulnDiscussion>DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot ac...Rule Low Severity -
SRG-APP-000435-AS-000163
<GroupDescription></GroupDescription>Group -
The WebSphere Application Server thread pool size must be defined according to application load requirements.
<VulnDiscussion>A thread pool enables components of the application server to reuse threads, which eliminates the need to create new threads ...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.