Home
Security Hardening
DISA IBM WebSphere Traditional 9 STIG V1R1

DISA IBM WebSphere Traditional 9 STIG V1R1

WBSP-AS-000230 – The WebSphere Application Server LDAP groups must be authorized for the WebSphere role.
Details Strong access controls are critical to securing the application server. Access control policies (e.g., identity-based policies, role-based policies, attribute-based...
WBSP-AS-000240 – The WebSphere Application Server users in a LDAP user registry group must be authorized for that group.
Details Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access...
WBSP-AS-000310 – The WebSphere Application Server management interface must display the Standard Mandatory DoD Notice and Consent Banner
Details Application servers are required to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the...
WBSP-AS-000320 – The WebSphere Application Server management interface must retain the Standard Mandatory DoD Notice and Consent Banner
Details To establish acceptance of system usage policy, a click-through banner at the application server management interface logon is required....
WBSP-AS-000380 – The WebSphere Application Server must generate log records when attempts to access subject privileges occur.
Details Accessing a subject’s privileges can be used to elevate a lower-privileged subject’s privileges temporarily in order to cause harm...
WBSP-AS-000580 – The WebSphere Application Server must allocate JVM log record storage capacity in accordance with requirements – err
Details JVM logs are logs used to store application and runtime related events, rather than audit related events. They are...
WBSP-AS-000580 – The WebSphere Application Server must allocate JVM log record storage capacity in accordance with requirements – out
Details JVM logs are logs used to store application and runtime related events, rather than audit related events. They are...
WBSP-AS-000590 – WebSphere Application Server must allocate audit log record storage capacity in accordance with requirements – maxFileSize
Details The proper management of log records not only dictates proper archiving processes and procedures be established, it also requires...
WBSP-AS-000590 – WebSphere Application Server must allocate audit log record storage capacity in accordance with requirements – maxLogs
Details The proper management of log records not only dictates proper archiving processes and procedures be established, it also requires...
WBSP-AS-000640 – The WebSphere Application Server must alert the SA and ISSO, in the event of a log processing failure – enabled
Details Logs are essential to monitor the health of the system, investigate changes that occurred to the system, or investigate...

Prev Next

DISA IBM WebSphere Traditional 9 STIG V1R1

WBSP-AS-000230 – The WebSphere Application Server LDAP groups must be authorized for the WebSphere role.

WBSP-AS-000240 – The WebSphere Application Server users in a LDAP user registry group must be authorized for that group.

WBSP-AS-000310 – The WebSphere Application Server management interface must display the Standard Mandatory DoD Notice and Consent Banner

WBSP-AS-000320 – The WebSphere Application Server management interface must retain the Standard Mandatory DoD Notice and Consent Banner

WBSP-AS-000380 – The WebSphere Application Server must generate log records when attempts to access subject privileges occur.

WBSP-AS-000580 – The WebSphere Application Server must allocate JVM log record storage capacity in accordance with requirements – err

WBSP-AS-000580 – The WebSphere Application Server must allocate JVM log record storage capacity in accordance with requirements – out

WBSP-AS-000590 – WebSphere Application Server must allocate audit log record storage capacity in accordance with requirements – maxFileSize

WBSP-AS-000590 – WebSphere Application Server must allocate audit log record storage capacity in accordance with requirements – maxLogs

WBSP-AS-000640 – The WebSphere Application Server must alert the SA and ISSO, in the event of a log processing failure – enabled