Home
Security Hardening
DISA IBM WebSphere Traditional 9 STIG V1R1 Middleware

DISA IBM WebSphere Traditional 9 STIG V1R1 Middleware

WBSP-AS-000010 – The WebSphere Application Server maximum in-memory session count must be set according to application requirements.
Details Application management includes the ability to control the number of sessions that utilize an application by all accounts and/or...
WBSP-AS-000020 – The WebSphere Application Server admin console session timeout must be configured.
Details An attacker can take advantage of user sessions that are left open, thus bypassing the user authentication process. To...
WBSP-AS-000070 – The WebSphere Application Server security auditing must be enabled.
Details Security auditing will not be performed unless the audit security subsystem has been enabled. Global security must be enabled...
WBSP-AS-000080 – WebSphere Application Server groups mapped to WebSphere auditor roles must be configured in accordance with security plan
Details Logging must be utilized in order to track system activity, assist in diagnosing system issues, and provide evidence needed...
WBSP-AS-000090 – The WebSphere Application Server users WebSphere auditor role must be configured in accordance with System Security Plan.
Details Logging must be utilized in order to track system activity, assist in diagnosing system issues, and provide evidence needed...
WBSP-AS-000100 – The WebSphere Application Server audit event type filters must be configured.
Details Logging must be utilized in order to track system activity, assist in diagnosing system issues, and provide evidence needed...
WBSP-AS-000110 – The WebSphere Application Server audit service provider must be enabled.
Details Logging must be utilized in order to track system activity, assist in diagnosing system issues, and provide evidence needed...
WBSP-AS-000120 – The WebSphere Application Server automatic repository checkpoints must be enabled to track configuration changes – depth
Details Without enabling repository checkpoints, you will not be able to determine the history of changes to WebSphere configuration files,...
WBSP-AS-000120 – The WebSphere Application Server automatic repository checkpoints must be enabled to track configuration changes – enabled
Details Without enabling repository checkpoints, you will not be able to determine the history of changes to WebSphere configuration files,...
WBSP-AS-000180 – The WebSphere Application Server Single Sign On (SSO) must have SSL enabled for Web and SIP Security.
Details Remote management access is accomplished by leveraging common communication protocols and establishing a remote connection to the application server...

DISA IBM WebSphere Traditional 9 STIG V1R1 Middleware

WBSP-AS-000010 – The WebSphere Application Server maximum in-memory session count must be set according to application requirements.

WBSP-AS-000020 – The WebSphere Application Server admin console session timeout must be configured.

WBSP-AS-000070 – The WebSphere Application Server security auditing must be enabled.

WBSP-AS-000080 – WebSphere Application Server groups mapped to WebSphere auditor roles must be configured in accordance with security plan

WBSP-AS-000090 – The WebSphere Application Server users WebSphere auditor role must be configured in accordance with System Security Plan.

WBSP-AS-000100 – The WebSphere Application Server audit event type filters must be configured.

WBSP-AS-000110 – The WebSphere Application Server audit service provider must be enabled.

WBSP-AS-000120 – The WebSphere Application Server automatic repository checkpoints must be enabled to track configuration changes – depth

WBSP-AS-000120 – The WebSphere Application Server automatic repository checkpoints must be enabled to track configuration changes – enabled

WBSP-AS-000180 – The WebSphere Application Server Single Sign On (SSO) must have SSL enabled for Web and SIP Security.