Detections
Analytics

6.6 Ensure 'AlgorithmSuite' is set to that strong algorithms for signing and encrypting messages with WS-Security policy

Information

Using strong signature and encryption algorithms when signing and encrypting SOAP messages using WS-Security policy increases security.Using strong signature and encryption algorithms when signing and encrypting SOAP messages using WS-Security policy is more secure.

Using strong signature and encryption algorithms is more secure.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Use Basic256Sha256 for Algorithm suite in WS-Security policy as seen in the example to wsdl or policy attachment files for each web service.

<sp:AlgorithmSuite>
 <wsp:Policy>
 <sp:Basic256Sha256/>
 </wsp:Policy>
</sp:AlgorithmSuite>

See Also

https://workbench.cisecurity.org/benchmarks/7724

Item Details

Category: ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-17(2), 800-53|IA-5, 800-53|IA-5(1), 800-53|SC-8, 800-53|SC-8(1), CSCv7|14.4

Plugin: Unix

Control ID: eeb2d6fadb9d744006401962feb645677c7f21f5aafaa070b7187750d8fd3e96