Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
For TLS connections, Forescout must automatically terminate the session when a client certificate is requested and the client does not have a suitable certificate. This is required for compliance with C2C Step 1.
Description
Discussion Text
In accordance with NIST SP 800-52, the TLS server must terminate the connection with a fatal "handshake failure" alert when a client certificate is requested and the client does not have a suitable certificate.
During the TLS handshake negotiation, a "client certificate request" that includes a list of the types of certificates supported and the Distinguished Names of acceptable Certification Authorities (CAs) is sent to the client.
TLS handshake enables the SSL or TLS client and server to establish the secret keys with which they communicate.
During the TLS handshake negotiation, a "client certificate request" that includes a list of the types of certificates supported and the Distinguished Names of acceptable Certification Authorities (CAs) is sent to the client.
TLS handshake enables the SSL or TLS client and server to establish the secret keys with which they communicate.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.