Detections
Analytics

SYMP-NM-000230 - Symantec ProxySG must implement HTTPS-console to provide replay-resistant authentication mechanisms for network access to privileged accounts.- HTTP Console Not Enabled

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator and the application validating the user credentials must not be vulnerable to a replay attack.
An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.
Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators

Solution

Enable TLS management services.
1. Log on to Web Management Console.
2. Click Configuration >> Services >> Management Services.
3. Make sure that "HTTPS-Console" is "Enabled".
4. Uncheck "Enabled" next to that "HTTP-Console".
5. Click "Apply".

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Symantec_ProxySG_V1R1_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CCI|CCI-001941, Rule-ID|SV-104527r1_rule, STIG-ID|SYMP-NM-000230, Vuln-ID|V-94697

Plugin: BlueCoat

Control ID: 7f17cc2727e19210ae4d58dba1eb3e1ba2080be2193837630a70230634ccc7ed