I - Mission Critical Public
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000014-AS-000009
Group -
The WebSphere Liberty Server Quality of Protection (QoP) must be set to use TLSv1.2 or higher.
Quality of Protection in WebSphere Liberty specifies the security level, ciphers, and mutual authentication settings for the Secure Socket Layer (SSL/TLS) configuration. For Quality of Protection s...Rule Medium Severity -
SRG-APP-000015-AS-000010
Group -
Security cookies must be set to HTTPOnly.
Web applications use cookies to track users across requests. These cookies, while typically not sensitive in themselves, connect to the existing state on the back-end system. If an intruder were to...Rule Medium Severity -
SRG-APP-000016-AS-000013
Group -
The WebSphere Liberty Server must log remote session and security activity.
Security auditing must be configured in order to log remote session activity. Security auditing will not be performed unless the audit feature (audit-1.0) has been enabled. The security feature (ap...Rule Medium Severity -
SRG-APP-000033-AS-000024
Group -
Users in the REST API admin role must be authorized.
Users with console access and OS permissions to the folders where the Liberty Server is installed can make changes to the server. In addition, REST API calls that execute server management tasks ar...Rule High Severity -
SRG-APP-000109-AS-000070
Group -
The WebSphere Liberty Server must be configured to offload logs to a centralized system.
Log processing failures include, but are not limited to, failures in the application server log capturing mechanisms or log storage capacity being reached or exceeded. In some instances, it is pref...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.