Home
Security Hardening
DISA IBM WebSphere Traditional 9 STIG V1R1

DISA IBM WebSphere Traditional 9 STIG V1R1

WBSP-AS-000640 – The WebSphere Application Server must alert the SA and ISSO, in the event of a log processing failure – notification
Details Logs are essential to monitor the health of the system, investigate changes that occurred to the system, or investigate...
WBSP-AS-000650 – The WebSphere Application Server audit subsystem failure action must be set to Log warning.
Details Logs are essential to monitor the health of the system, investigate changes that occurred to the system, or investigate...
WBSP-AS-000660 – The WebSphere Application Server must shut down by default upon log failure (unless availability is an overriding concern).
Details It is critical that, when a system is at risk of failing to process logs, it detects and takes...
WBSP-AS-000670 – The WebSphere Application Server high availability applications must be configured to fail over in log subsystem failure.
Details This requirement is dependent upon system MAC and availability. If the system MAC and availability do not specify redundancy...
WBSP-AS-000630 – The WebSphere Application Server must provide an immediate real-time alert of all log failure events – enabled
Details It is critical for the appropriate personnel to be aware if a system is at risk of failing to...
WBSP-AS-000630 – The WebSphere Application Server must provide an immediate real-time alert of all log failure events – notification
Details It is critical for the appropriate personnel to be aware if a system is at risk of failing to...
WBSP-AS-000740 – The WebSphere Application Server must be configured to protect log information from any type of unauthorized read access.
Details WebSphere uses role-based access controls to restrict access to log data. To take advantage of this capability, WebSphere administrators...
WBSP-AS-000750 – The WebSphere Application Server must protect log information from unauthorized modification.
Details WebSphere uses role-based access controls to restrict access to log data. To take advantage of this capability, WebSphere administrators...
WBSP-AS-000760 – The WebSphere Application Server must protect log information from unauthorized deletion.
Details WebSphere uses role based access controls to restrict access to log data. To take advantage of this capability, WebSphere...
WBSP-AS-000770 – The WebSphere Application Server wsadmin file must be protected from unauthorized access.
Details Protecting log data also includes identifying and protecting the tools used to view and manipulate log data. Depending upon...

Prev Next

DISA IBM WebSphere Traditional 9 STIG V1R1

WBSP-AS-000640 – The WebSphere Application Server must alert the SA and ISSO, in the event of a log processing failure – notification

WBSP-AS-000650 – The WebSphere Application Server audit subsystem failure action must be set to Log warning.

WBSP-AS-000660 – The WebSphere Application Server must shut down by default upon log failure (unless availability is an overriding concern).

WBSP-AS-000670 – The WebSphere Application Server high availability applications must be configured to fail over in log subsystem failure.

WBSP-AS-000630 – The WebSphere Application Server must provide an immediate real-time alert of all log failure events – enabled

WBSP-AS-000630 – The WebSphere Application Server must provide an immediate real-time alert of all log failure events – notification

WBSP-AS-000740 – The WebSphere Application Server must be configured to protect log information from any type of unauthorized read access.

WBSP-AS-000750 – The WebSphere Application Server must protect log information from unauthorized modification.

WBSP-AS-000760 – The WebSphere Application Server must protect log information from unauthorized deletion.

WBSP-AS-000770 – The WebSphere Application Server wsadmin file must be protected from unauthorized access.