STIGQter: STIG Summary:| Checked | Name | Title |
|---|---|---|
| ☐ | SV-259104r960735_rule | The vCenter UI service must limit the number of maximum concurrent connections permitted. |
| ☐ | SV-259105r1137578_rule | The vCenter UI service cookies must have secure flag set. |
| ☐ | SV-259106r960888_rule | The vCenter UI service must initiate session logging upon startup. |
| ☐ | SV-259107r960891_rule | The vCenter UI service must produce log records containing sufficient information regarding event details. |
| ☐ | SV-259108r960930_rule | The vCenter UI service must protect logs from unauthorized access. |
| ☐ | SV-259109r960960_rule | The vCenter UI service must limit privileges for creating or modifying hosted application shared files. |
| ☐ | SV-259110r960963_rule | The vCenter UI service must disable stack tracing. |
| ☐ | SV-259111r1043177_rule | The vCenter UI service must be configured to use a specified IP address and port. |
| ☐ | SV-259112r1043180_rule | The vCenter UI service must be configured to limit data exposure between applications. |
| ☐ | SV-259113r961122_rule | The vCenter UI service must be configured to fail to a known safe state if system initialization fails. |
| ☐ | SV-259114r961158_rule | The vCenter UI service must set URIEncoding to UTF-8. |
| ☐ | SV-259115r961167_rule | The vCenter UI service "ErrorReportValve showServerInfo" must be set to "false". |
| ☐ | SV-259116r1043182_rule | The vCenter UI service must set an inactive timeout for sessions. |
| ☐ | SV-259117r1210442_rule | The vCenter UI service must off-load log records onto a different system or media from the system being logged. |
| ☐ | SV-259118r961863_rule | The vCenter UI service must enable "STRICT_SERVLET_COMPLIANCE". |
| ☐ | SV-259119r960735_rule | The vCenter UI service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive. |
| ☐ | SV-259120r960735_rule | The vCenter UI service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive. |
| ☐ | SV-259121r1210444_rule | The vCenter UI service must configure the "setCharacterEncodingFilter" filter. |
| ☐ | SV-259122r1137578_rule | The vCenter UI service cookies must have "http-only" flag set. |
| ☐ | SV-259123r1137578_rule | The vCenter UI service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands. |
| ☐ | SV-259124r1210446_rule | The vCenter UI service shutdown port must be disabled. |
| ☐ | SV-259125r960963_rule | The vCenter UI service debug parameter must be disabled. |
| ☐ | SV-259126r960963_rule | The vCenter UI service directory listings parameter must be disabled. |
| ☐ | SV-259127r960963_rule | The vCenter UI service deployXML attribute must be disabled. |
| ☐ | SV-259128r960963_rule | The vCenter UI service must have Autodeploy disabled. |
| ☐ | SV-259129r960963_rule | The vCenter UI service xpoweredBy attribute must be disabled. |
| ☐ | SV-259130r960963_rule | The vCenter UI service example applications must be removed. |
| ☐ | SV-259131r960963_rule | The vCenter UI service default ROOT web application must be removed. |
| ☐ | SV-259132r960963_rule | The vCenter UI service default documentation must be removed. |
| ☐ | SV-259133r961863_rule | The vCenter UI service must disable "ALLOW_BACKSLASH". |
| ☐ | SV-259134r961863_rule | The vCenter UI service must enable "ENFORCE_ENCODING_IN_GET_WRITER". |
| ☐ | SV-259135r960963_rule | The vCenter UI service manager webapp must be removed. |
| ☐ | SV-259136r1003680_rule | The vCenter UI service host-manager webapp must be removed. |