Detections
Analytics

TNS IBM WebSphere Application Server 9 Linux Best Practices

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: TNS IBM WebSphere Application Server 9 Linux Best Practices

Updated: 1/5/2022

Authority: TNS

Plugin: Unix

Revision: 1.8

Estimated Item Count: 23

File Details

Filename: TNS_IBM_WebSphere_Application_Server_9_Linux.audit

Size: 29 kB

MD5: daabbf35e9a773a5ad79f3d152d826a4
SHA256: 41d67dcb81f29e91b1725fb3f8db946be0a9700a750c911566bc25bd0bbe38e7

Audit Changelog

 
Revision 1.8

Jan 5, 2022

Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Revision 1.7

Feb 1, 2021

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.6

Sep 29, 2020

Miscellaneous
  • References updated.
Revision 1.5

Jul 14, 2020

Miscellaneous
  • Metadata updated.
Revision 1.4

Apr 22, 2020

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.3

Feb 7, 2019

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.2

Dec 13, 2018

Miscellaneous
  • References updated.
Revision 1.1

Jul 24, 2018

Functional Update
  • Deploy WebSphere Application Server on a Dedicated System
  • Ensure Administrative Security is Enabled
  • Ensure CSIv2 inbound communications transport is SSL-required
  • Ensure Diagnostic Trace Output is Disabled
  • Ensure External Authorization Provider is Enabled
  • Ensure HTTP Access Logging Service is Enabled
  • Ensure HTTP Access Logging is Enabled
  • Ensure HTTP Error Logging is Enabled
  • Ensure HTTPOnly attribute on LTPA cookies
  • Ensure Persisting Credentials is Enabled
  • Ensure Sample Applications are removed
  • Ensure Security Auditing is Enabled
  • Ensure Session Security Integration is Enabled
  • Ensure Session Timeout is 30 minutes or less
  • Ensure Standalone LDAP Registry SSL is Enabled
  • Ensure Trust Association is Enabled
  • Ensure WebSphere Application Server running as non-root user
  • Ensure appropriate permissions on WebSphere Installation Directory
  • Ensure appropriate permissions on fileRegistry.xml
  • Review Groups with 'Administrator' Administrative Group Role
  • Review Installed Applications
  • Review Users with 'Administrator' Administrative User Role
  • TNS_IBM_WebSphere_Application_Server_9_Linux.audit for IBM WebSphere Application Server 9
Informational Update
  • TNS_IBM_WebSphere_Application_Server_9_Linux.audit for IBM WebSphere Application Server 9
Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • References updated.