Skip to content

IBM WebSphere Traditional V9.x Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The WebSphere Application Server users in a local user registry group must be authorized for that group.

    Application servers provide remote access capability and must be able to enforce remote access policy requirements or work in conjunction with enterprise tools designed to enforce policy requiremen...
    Rule Medium Severity
  • SRG-APP-000014-AS-000009

    Group
  • The WebSphere Application Server Single Sign On (SSO) must have SSL enabled for Web and SIP Security.

    Remote management access is accomplished by leveraging common communication protocols and establishing a remote connection to the application server via a network for the purposes of managing the a...
    Rule High Severity
  • SRG-APP-000015-AS-000010

    Group
  • The WebSphere Application Server security cookies must be set to HTTPOnly.

    Web applications use cookies to track users across requests. These cookies, while typically not sensitive in themselves, connect you to your existing state on the back end system. If an intruder we...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules