Ensure pattern in context.xml is correct
Details The pattern setting informs Tomcat what information should be logged. At a minimum, enough information to uniquely identify a...
- Home
- Security Hardening
- CIS Apache Tomcat 7 L1 V1.1.0 Middleware
CIS Apache Tomcat 7 L1 V1.1.0 Middleware
Ensure scheme is set accurately
Details The scheme attribute is used to indicate to callers of request.getScheme() which scheme is in use by the Connector....Ensure secure is set to true only for SSL-enabled Connectors (verify secure is set to true)
Details The secure attribute is used to convey Connector security status to applications operating over the Connector. This is typically...Ensure SSLEnabled is set to True for Sensitive Connectors(verify SSLEnabled is set to true)
Details The SSLEnabled setting determines if SSL is enabled for a specific Connector. It is recommended that SSL be utilized...Ensure sslProtocol is set to TLS for Secure Connectors (verify sslProtocol is set to TLS)
Details The sslProtocol setting determines which protocol Tomcat will use to protect traffic. It is recommended that sslProtocol attribute be...Ensure Web content directory is on a separate partition from the Tomcat system files (verify Web content directory)
Details The web document directory is where the files which are served to the end user reside. In the past,...Force SSL when accessing the manager application
Details Use the transport-guarantee attribute to ensure SSL protection when accessing the manager application. Solution Set $CATALINA_HOME/webapps/manager/WEB-INF/web.xml: CONFIDENTIAL Supportive Information...Restrict access to $CATALINA_BASE
Details $CATALINA_BASE is the environment variable that specifies the base directory which most relative paths are resolved. $CATALINA_BASE is usually...Restrict access to $CATALINA_HOME
Details $CATALINA_HOME is the environment variable which holds the path to the root Tomcat directory. It is important to protect...Restrict access to Tomcat binaries directory
Details The Tomcat $CATALINA_HOME/bin/ directory contains executables that are part of the Tomcat run-time. It is recommended that the ownership...