STIGQter: STIG Summary: ISEC7 Sphere Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The ISEC7 SPHERE must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.

DISA Rule

SV-224762r1013803_rule

Vulnerability Number

V-224762

Group Title

SRG-APP-000014

Rule Version

ISEC-06-000060

Severity

CAT II

CCI(s)

• CCI-000068 - Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.

Weight

10

Fix Recommendation

Log in to the ISEC7 SPHERE Console.
Navigate to Administration >> Configuration >> Apache Tomcat Settings.
Using the dropdown menu for protocols, select +TLSv1.2, +TLSv1.3.
Click "Update".
Restart the ISEC7 SPHERE Web service.

Check Contents

Log in to the ISEC7 SPHERE Console.
Navigate to Administration >> Configuration >> Apache Tomcat Settings.
Verify "protocols" is set to +TLSv1.2, +TLSv1.3.

If "protocols" is not set to +TLSv1.2 or higher, this is a finding.

Vulnerability Number

V-224762

Documentable

False

Rule Version

ISEC-06-000060

Severity Override Guidance

Log in to the ISEC7 SPHERE Console.
Navigate to Administration >> Configuration >> Apache Tomcat Settings.
Verify "protocols" is set to +TLSv1.2, +TLSv1.3.

If "protocols" is not set to +TLSv1.2 or higher, this is a finding.

Check Content Reference

M

Target Key

4200