WBLC-10-000271 - Oracle WebLogic must be managed through a centralized enterprise tool.

Information

The application server can host multiple applications which require different functions to operate successfully but many of the functions are capabilities that are needed for all the hosted applications and should be managed through a common interface. Examples of enterprise wide functions are automated rollback of changes, failover and patching.

These functions are often outside the domain of the application server and so the application server must be integrated with a tool, such as Oracle Enterprise Manager, which is specific built to handle these requirements.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Install a tool such as Oracle Enterprise Manager, to handle enterprise functionality such as automated failover, rollback and patching of Oracle WebLogic.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_WebLogic_Server_12c_V2R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-235998r961863_rule, STIG-ID|WBLC-10-000271, STIG-Legacy|SV-70639, STIG-Legacy|V-56385, Vuln-ID|V-235998

Plugin: Unix

Control ID: 1c15b81f27eb520ff73f8c7d752356e567e072b8dd4b10e4f5c24cb85f5f57e0