STIGQter: STIG Summary:| Checked | Name | Title |
|---|---|---|
| ☐ | SV-259104r935216_rule | The vCenter UI service must limit the number of maximum concurrent connections permitted. |
| ☐ | SV-259105r935219_rule | The vCenter UI service cookies must have secure flag set. |
| ☐ | SV-259106r935222_rule | The vCenter UI service must initiate session logging upon startup. |
| ☐ | SV-259107r935225_rule | The vCenter UI service must produce log records containing sufficient information regarding event details. |
| ☐ | SV-259108r935228_rule | The vCenter UI service must protect logs from unauthorized access. |
| ☐ | SV-259109r935231_rule | The vCenter UI service must limit privileges for creating or modifying hosted application shared files. |
| ☐ | SV-259110r935234_rule | The vCenter UI service must disable stack tracing. |
| ☐ | SV-259111r935237_rule | The vCenter UI service must be configured to use a specified IP address and port. |
| ☐ | SV-259112r935240_rule | The vCenter UI service must be configured to limit data exposure between applications. |
| ☐ | SV-259113r935243_rule | The vCenter UI service must be configured to fail to a known safe state if system initialization fails. |
| ☐ | SV-259114r935246_rule | The vCenter UI service must set URIEncoding to UTF-8. |
| ☐ | SV-259115r935249_rule | The vCenter UI service "ErrorReportValve showServerInfo" must be set to "false". |
| ☐ | SV-259116r935252_rule | The vCenter UI service must set an inactive timeout for sessions. |
| ☐ | SV-259117r935255_rule | The vCenter UI service must offload log records onto a different system or media from the system being logged. |
| ☐ | SV-259118r935258_rule | The vCenter UI service must enable "STRICT_SERVLET_COMPLIANCE". |
| ☐ | SV-259119r935261_rule | The vCenter UI service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive. |
| ☐ | SV-259120r935264_rule | The vCenter UI service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive. |
| ☐ | SV-259121r935267_rule | The vCenter UI service must configure the "setCharacterEncodingFilter" filter. |
| ☐ | SV-259122r935270_rule | The vCenter UI service cookies must have "http-only" flag set. |
| ☐ | SV-259123r935273_rule | The vCenter UI service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands. |
| ☐ | SV-259124r935276_rule | The vCenter UI service shutdown port must be disabled. |
| ☐ | SV-259125r935279_rule | The vCenter UI service debug parameter must be disabled. |
| ☐ | SV-259126r935282_rule | The vCenter UI service directory listings parameter must be disabled. |
| ☐ | SV-259127r935285_rule | The vCenter UI service deployXML attribute must be disabled. |
| ☐ | SV-259128r935288_rule | The vCenter UI service must have Autodeploy disabled. |
| ☐ | SV-259129r935291_rule | The vCenter UI service xpoweredBy attribute must be disabled. |
| ☐ | SV-259130r935294_rule | The vCenter UI service example applications must be removed. |
| ☐ | SV-259131r935297_rule | The vCenter UI service default ROOT web application must be removed. |
| ☐ | SV-259132r935300_rule | The vCenter UI service default documentation must be removed. |
| ☐ | SV-259133r935303_rule | The vCenter UI service must disable "ALLOW_BACKSLASH". |
| ☐ | SV-259134r935306_rule | The vCenter UI service must enable "ENFORCE_ENCODING_IN_GET_WRITER". |
| ☐ | SV-259135r935309_rule | The vCenter UI service manager webapp must be removed. |
| ☐ | SV-259136r935312_rule | The vCenter UI service host-manager webapp must be removed. |