5.16 OAS - 'SSL Client Authentication - ssl_client_authentication = TRUE'

Information

It is preferable to have mutually authenticated SSL connections verifying the identity of both parties. If possible use client and server
certificates for SSL connections. If client certificates are not supported in the enterprise, then set to FALSE.
Level 2, Scorable

See Also

https://workbench.cisecurity.org/files/580

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17(2)

Plugin: Windows

Control ID: 734d71706e350b348b32ffd4082875f0b33085dab2b921e5fd10a9fc6c480899