Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
tc Server VCO must perform server-side session management.
Description
Discussion Text
Cookies are a common way to save session state over the HTTP(S) protocol. If an attacker can compromise session data stored in a cookie, they are better able to launch an attack against the server and its applications.
Session cookies stored on the server are more secure than cookies stored on the client. Therefore, tc Server must be configured correctly in order to generate and manage session cookies on the server. Managing cookies on the server provides a layer of defense to vRealize Automation.
By default, tc Server is designed to manage cookies on the server. However, incorrect configuration can turn off the default feature.
Session cookies stored on the server are more secure than cookies stored on the client. Therefore, tc Server must be configured correctly in order to generate and manage session cookies on the server. Managing cookies on the server provides a layer of defense to vRealize Automation.
By default, tc Server is designed to manage cookies on the server. However, incorrect configuration can turn off the default feature.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.