Detections
Analytics

WBSP-AS-000160 - The WebSphere Application Server Quality of Protection (QoP) must be set to use TLSv1.2 or higher.

Information

Quality of Protection specifies the security level, ciphers, and mutual authentication settings for the Secure Socket Layer (SSL/TLS) configuration.

Solution

From the administrative console, navigate to Security >> SSL certificate and key management.

Click 'SSL configurations'.

Click on each SSL configuration.

Under 'Additional Properties', click 'Quality of protection (QoP)' settings.

At the 'Protocol' pull-down menu, select 'TLSv1.2 or greater'.

Click 'OK'.

Click 'Save'.

Restart the DMGR and all the JVMs.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_WebSphere_Traditional_V9-x_V2R1_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17(2), CAT|II, CCI|CCI-000068, Rule-ID|SV-255829r960759_rule, STIG-ID|WBSP-AS-000160, STIG-Legacy|SV-95929, STIG-Legacy|V-81215, Vuln-ID|V-255829

Plugin: Unix

Control ID: 3cad51cbaf6f1505ea72a32ab0069971331cddcba9cc2b813f7df5e8bb067b6b