8 - Management IP - review $jetty_home/contexts xml file


A dedicated management IP should be configured

Avoid Unauthorizd user access to the server

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


create .htaccess file in the root directory of your web application. Find in $jetty_home/contexts xml file, which corresponds to the name of your Jetty web application (test.xml in our case) and protect access to your application by HTAccessHandler, that uses the .htaccess policy file.