CyberStrikeus/CyberStrike - Page 27

cis-apache24-7-3

Ensure the Server's Private Key Is Protected

cis-apache24-7-4

Ensure the TLSv1.0 and TLSv1.1 Protocols are Disabled

cis-apache24-7-5

Ensure Weak SSL/TLS Ciphers Are Disabled

cis-apache24-7-6

Ensure Insecure SSL Renegotiation Is Not Enabled (Manual)

cis-apache24-7-7

Ensure SSL Compression is not Enabled (Manual)

cis-apache24-7-8

Ensure Medium Strength SSL/TLS Ciphers Are Disabled (Manual)

cis-apache24-7-9

Ensure All Web Content is Accessed via HTTPS (Manual)

cis-apache24-8-1

Ensure ServerTokens is Set to 'Prod' or 'ProductOnly' (Automated)

cis-apache24-8-2

Ensure ServerSignature Is Not Enabled (Automated)

cis-apache24-8-3

Ensure All Default Apache Content Is Removed (Manual)

cis-apache24-8-4

Ensure ETag Response Header Fields Do Not Include Inodes (Automated)

cis-apache24-9-1

Ensure the TimeOut Is Set to 10 or Less (Automated)

cis-apache24-9-2

Ensure KeepAlive Is Enabled (Automated)

cis-apache24-9-3

Ensure MaxKeepAliveRequests is Set to a Value of 100 or Greater (Automated)

cis-apache24-9-4

Ensure KeepAliveTimeout is Set to a Value of 15 or Less (Automated)

cis-apache24-9-5

Ensure the Timeout Limits for Request Headers is Set to 40 or Less (Manual)

cis-apache24-9-6

Ensure Timeout Limits for the Request Body is Set to 20 or Less (Manual)

cis-tomcat101-1-1

Remove extraneous files and directories (Manual)

cis-tomcat101-1-2

Disable Unused Connectors (Manual)

cis-tomcat101-10-1

Ensure Web content directory is on a separate partition from the Tomcat system files (Manual)

cis-tomcat101-10-10

Configure maxHttpHeaderSize (Automated)

cis-tomcat101-10-11

Force SSL for all applications (Automated)

cis-tomcat101-10-12

Do not allow symbolic linking (Automated)

cis-tomcat101-10-13

Do not run applications as privileged (Automated)

cis-tomcat101-10-14

Do not allow cross context requests (Automated)

cis-tomcat101-10-15

Do not resolve hosts on logging valves (Automated)

cis-tomcat101-10-16

Enable memory leak listener (Automated)

cis-tomcat101-10-17

Setting Security Lifecycle Listener (Automated)

cis-tomcat101-10-18

Use the logEffectiveWebXml and metadata-complete settings for deploying applications in production (Automated)

cis-tomcat101-10-19

Ensure Manager Application Passwords are Encrypted (Manual)

cis-tomcat101-10-2

Restrict access to the web administration application (Automated)

cis-tomcat101-10-3

Restrict manager application (Manual)

cis-tomcat101-10-4

Force SSL when accessing the manager application via HTTP (Manual)

cis-tomcat101-10-5

Rename the manager application (Manual)

cis-tomcat101-10-6

Enable strict servlet Compliance (Manual)

cis-tomcat101-10-7

Turn off session facade recycling (Manual)

cis-tomcat101-10-8

Do not allow additional path delimiters (Manual)

cis-tomcat101-10-9

Configure connectionTimeout (Automated)

cis-tomcat101-2-1

Alter the Advertised server.info String (Manual)

cis-tomcat101-2-2

Alter the Advertised server.number String (Manual)