Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
HTTPS must be enabled for JBoss web interfaces.
Description
Discussion Text
Encryption is critical for protection of web-based traffic. If encryption is not being used to protect the application server's web connectors, malicious users may gain the ability to read or modify the application traffic while it is in transit over the network. The use of cryptography on web connectors secures web-based traffic and mitigates that risk. HTTPS and Transport Layer Security (TLS) are the means in which cryptographic protections are applied to web connectors.
FIPS 140-2 approved TLS versions include TLS V1.2 or greater.
FIPS 140-2 approved TLS versions include TLS V1.2 or greater.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.