VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide

The VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide (V1 R2) has 62 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

62STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Oct 25 2023 What changed in V1R2

Lighttpd must be configured to use port 5480.

VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide

Assessment Title

Rule Text

Lighttpd must be configured to use port 5480.

Description

Discussion Text

Lighttpd is used as the web server for vRealize Automation's Virtual Appliance Management Interface (vAMI). To segregate appliance management from appliance operation, Lighttpd can be configured to listen on a separate port. Port 5488 is the recommended port setting.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-240247

Rule

SV-240247r879588_rule

Severity

medium

Rule Version

VRAU-LI-000220

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

At the command prompt, execute the following command:

grep '^server.port' /opt/vmware/etc/lighttpd/lighttpd.conf

If the value of "server.port" is not "5480", this is a finding.

Implementation Procedure

Fix Text

Navigate to and open /opt/vmware/etc/lighttpd/lighttpd.conf file

Configure the lighttpd.conf file with the following:

server.port = 5480

STIG check 33 of 62 in the VMware vRealize Automation 7.x Lighttpd STIG checklist

← Previous · V-240246Lighttpd must not use symbolic links in the Lighttpd web content directory tree.Next · V-240248 →Lighttpd must use SSL/TLS protocols in order to secure passwords during transmission from the client.