TMAegisБета
sr

Прегледач правила

Прегледајте свако правило за ојачавање безбедности у каталогу. Филтрирајте по платформи, озбиљности, нивоу профила и томе да ли се провера може аутоматизовати.

Пронађено 113 правилаод 16.927Страница 1 од 5

IDНасловОзбиљност
TMA-WEBSPHERE-1.1Ensure root does not have ownership of Websphere Liberty binarieswebsphere · Ниво 1Висока
TMA-WEBSPHERE-2.1Ensure 'displayAuthenticationRealm' is set to 'false'websphere · Ниво 1Висока
TMA-WEBSPHERE-2.3Ensure that the LDAP connection uses TLSwebsphere · Ниво 1Висока
TMA-WEBSPHERE-3.2Ensure JDK Security Manager is Enabledwebsphere · Ниво 2Висока
TMA-WEBSPHERE-4.1.2.2Ensure 'ssoDomainNames' attribute is configured for the authentication cookies.websphere · Ниво 1Висока
TMA-WEBSPHERE-4.1.2.4Ensure 'ssoRequiresSSL' secure attribute is set to 'true' for the LTPA Cookieswebsphere · Ниво 1Висока
TMA-WEBSPHERE-4.1.2.6Ensure 'httpOnlyCookies' HttpOnly attribute is set to 'True' for the authentication cookieswebsphere · Ниво 1Висока
TMA-WEBSPHERE-4.2.2Ensure 'sslProtocol' is set to the latest versions of TLS (Transport Layer Security)websphere · Ниво 1Висока
TMA-WEBSPHERE-4.2.4Ensure that outbound TLS configurations are specifiedwebsphere · Ниво 1Висока
TMA-WEBSPHERE-4.2.7Ensure Hostname verification for TLS communication is enabledwebsphere · Ниво 1Висока
TMA-WEBSPHERE-4.2.10Ensure mutual TLS authentication is enabledwebsphere · Ниво 2Висока
TMA-WEBSPHERE-4.2.11Ensure that strong algorithms are used for TLS certificates.websphere · Ниво 1Висока
TMA-WEBSPHERE-4.2.13Ensure that hardware crypto cards/modules (HSM) are used to store SSL/TLS certificateswebsphere · Ниво 2Висока
TMA-WEBSPHERE-4.2.14Ensure SP800-131a recommendation is used for stronger cryptographic keys and more robust algorithms.websphere · Ниво 2Висока
TMA-WEBSPHERE-4.2.15Ensure that the Federal Information Processing Standards (FIPS) are used for the cryptographic moduleswebsphere · Ниво 2Висока
TMA-WEBSPHERE-4.3.1Ensure 'signatureAlgorithm' asymmetric key algorithm is set for encrypting the JSON Web Tokenswebsphere · Ниво 1Висока
TMA-WEBSPHERE-4.3.6Ensure 'signatureAlgorithm' is set to a secure algorithm in OIDC Relying Party (RP)websphere · Ниво 1Висока
TMA-WEBSPHERE-4.3.7Ensure 'signatureAlgorithm' is set to a secure algorithm in OIDC Provider (OP)websphere · Ниво 1Висока
TMA-WEBSPHERE-4.3.8Ensure 'httpsRequired' is set to 'true' in OIDC Relying Party (RP)websphere · Ниво 1Висока
TMA-WEBSPHERE-4.3.9Ensure 'tokenEndpointAuthMethodsSupported' is set to a valid authentication method in OIDC Provider (OP)websphere · Ниво 1Висока
TMA-WEBSPHERE-4.3.12Ensure 'clientSecretEncoding' is set to a strong encoding type in OAuth 2.0websphere · Ниво 1Висока
TMA-WEBSPHERE-4.3.13Ensure 'httpsRequired' is set to 'true' in OAuth 2.0websphere · Ниво 1Висока
TMA-WEBSPHERE-4.3.15Ensure 'httpsRequired' is set to 'true' in SAMLwebsphere · Ниво 1Висока
TMA-WEBSPHERE-4.4.5Ensure 'logoutOnHttpSessionExpire' is set to 'true'websphere · Ниво 1Висока
TMA-WEBSPHERE-4.4.14Ensure 'invalidateOnUnauthorizedSessionRequestException' is set to 'false'websphere · Ниво 1Висока