No profile (default benchmark)
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000001-AS-000001
Group -
The vCenter STS service must limit the number of maximum concurrent connections permitted.
Resource exhaustion can occur when an unlimited number of concurrent requests are allowed on a website, facilitating a denial-of-service attack. Unless the number of requests is controlled, the web...Rule Medium Severity -
SRG-APP-000014-AS-000009
Group -
The vCenter STS service must be configured to use strong encryption ciphers.
Tomcat has several remote communications channels. Examples are user requests via http/https, communication to a backend database, or communication to authenticate users. The encryption used to com...Rule Medium Severity -
SRG-APP-000033-AS-000024
Group -
The vCenter STS service cookies must have secure flag set.
The secure flag is an option that can be set by the application server when sending a new cookie to the user within an HTTP Response. The purpose of the secure flag is to prevent cookies from being...Rule Medium Severity -
SRG-APP-000092-AS-000053
Group -
The vCenter STS service must initiate session logging upon startup.
Logging must be started as soon as possible when a service starts and as late as possible when a service is stopped. Many forms of suspicious actions can be detected by analyzing logs for unexpecte...Rule Medium Severity -
SRG-APP-000095-AS-000056
Group -
The vCenter STS service must produce log records containing sufficient information regarding event details.
Remote access can be exploited by an attacker to compromise the server. By recording all remote access activities, it will be possible to determine the attacker's location, intent, and degree of su...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.