CyberStrikeus/CyberStrike - Page 32

cis-tomcat7-v110-4-5

Restrict access to Tomcat temp directory

cis-tomcat7-v110-4-6

Restrict access to Tomcat binaries directory

cis-tomcat7-v110-4-7

Restrict access to Tomcat web application directory

cis-tomcat7-v110-4-8

Restrict access to Tomcat catalina.policy

cis-tomcat7-v110-4-9

Restrict access to Tomcat catalina.properties

cis-tomcat7-v110-5-1

Use secure Realms

cis-tomcat7-v110-5-2

Use LockOut Realms

cis-tomcat7-v110-6-1

Setup Client-cert Authentication

cis-tomcat7-v110-6-2

Ensure SSLEnabled is set to True for Sensitive Connectors

cis-tomcat7-v110-6-3

Ensure scheme is set accurately

cis-tomcat7-v110-6-4

Ensure secure is set to true only for SSL-enabled Connectors

cis-tomcat7-v110-6-5

Ensure SSL Protocol is set to TLS for Secure Connectors

cis-tomcat7-v110-7-1

Application specific logging

cis-tomcat7-v110-7-2

Specify file handler in logging.properties files

cis-tomcat7-v110-7-3

Ensure className is set correctly in context.xml

cis-tomcat7-v110-7-4

Ensure directory in context.xml is a secure location

cis-tomcat7-v110-7-5

Ensure pattern in context.xml is correct

cis-tomcat7-v110-7-6

Ensure directory in logging.properties is a secure location

cis-tomcat7-v110-7-7

Configure log file size limit

cis-tomcat7-v110-8-1

Restrict runtime access to sensitive packages

cis-tomcat7-v110-9-1

Starting Tomcat with Security Manager

cis-tomcat7-v110-9-2

Disabling auto deployment of applications

cis-tomcat7-v110-9-3

Disable deploy on startup of applications

cis-tomcat8-v100-1-1

Remove extraneous files and directories

cis-tomcat8-v100-10-1

Ensure Web content directory is on a separate partition from the Tomcat system files (Manual)

cis-tomcat8-v100-10-10

Configure maxHttpHeaderSize (Automated)

cis-tomcat8-v100-10-11

Force SSL for all applications (Automated)

cis-tomcat8-v100-10-12

Do not allow symbolic linking (Automated)

cis-tomcat8-v100-10-14

Do not allow cross context requests (Automated)

cis-tomcat8-v100-10-15

Do not resolve hosts on logging valves (Automated)

cis-tomcat8-v100-10-16

Enable memory leak listener (Automated)

cis-tomcat8-v100-10-17

Setting Security Lifecycle Listener (Automated)

cis-tomcat8-v100-10-18

Use the logEffectiveWebXml and metadata-complete settings for deploying applications in production (Automated)

cis-tomcat8-v100-10-19

Ensure Manager Application Passwords are Encrypted (Manual)

cis-tomcat8-v100-10-2

Restrict access to the web administration application (Automated)

cis-tomcat8-v100-10-20

Use the logEffectiveWebXml and metadata-complete settings for deploying applications in production (Scored)

cis-tomcat8-v100-10-3

Restrict manager application (Manual)

cis-tomcat8-v100-10-4

Force SSL when accessing the manager application via HTTP (Manual)

cis-tomcat8-v100-10-5

Rename the manager application (Manual)

cis-tomcat8-v100-10-6

Enable strict servlet Compliance (Manual)