1.2 Disable Unused Connectors

Information

The default installation of Tomcat includes connectors with default settings. These are traditionally set up for convenience. It is best to remove these connectors and enable only what is needed.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Within $CATALINA_HOME/conf/server.xml, remove or comment each unused Connector.

See Also

https://workbench.cisecurity.org/files/266

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: c3d922c2dce6195b6407c223ec70973e6f58d8bb5e9f12e469f1792db0029b23