STIGQter: STIG Summary: VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

HAProxy frontend servers must be bound to a specific port.

DISA Rule

SV-99809r1_rule

Vulnerability Number

V-89159

Group Title

SRG-APP-000142-WSR-000089

Rule Version

VRAU-HA-000185

Severity

CAT II

CCI(s)

• CCI-000382 - The organization configures the information system to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services.

Weight

10

Fix Recommendation

Navigate to and open the following files:

/etc/haproxy/conf.d/20-vcac.cfg
/etc/haproxy/conf.d/30-vro-config.cfg

Configure each frontend to be bound to at least one port.

Check Contents

Navigate to and open the following files:

/etc/haproxy/conf.d/20-vcac.cfg
/etc/haproxy/conf.d/30-vro-config.cfg

Verify that each frontend is bound to at least one port. Below is an example binding:

frontend https-in-vro-config
bind :8283

If each frontend is not bound to at least one port, this is a finding.

Vulnerability Number

V-89159

Documentable

False

Rule Version

VRAU-HA-000185

Severity Override Guidance

Navigate to and open the following files:

/etc/haproxy/conf.d/20-vcac.cfg
/etc/haproxy/conf.d/30-vro-config.cfg

Verify that each frontend is bound to at least one port. Below is an example binding:

frontend https-in-vro-config
bind :8283

If each frontend is not bound to at least one port, this is a finding.

Check Content Reference

M

Target Key

3455

Comments