Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
vSphere Client must be configured with FIPS 140-2 compliant ciphers for HTTPS connections.
Description
Discussion Text
Encryption of data in flight is an essential element of protecting information confidentiality. If a web server uses weak or outdated encryption algorithms, the server's communications can potentially be compromised.
The US Federal Information Processing Standards (FIPS) publication 140-2, Security Requirements for Cryptographic Modules (FIPS 140-2), approved ciphers provide the maximum level of encryption possible for a private web server.
The Tomcat connector listening on 9443 comes preconfigured with appropriate FIPS ciphers by default, but this must be verified.
Satisfies: SRG-APP-000014-WSR-000006, SRG-APP-000179-WSR-000110, SRG-APP-000439-WSR-000188
The US Federal Information Processing Standards (FIPS) publication 140-2, Security Requirements for Cryptographic Modules (FIPS 140-2), approved ciphers provide the maximum level of encryption possible for a private web server.
The Tomcat connector listening on 9443 comes preconfigured with appropriate FIPS ciphers by default, but this must be verified.
Satisfies: SRG-APP-000014-WSR-000006, SRG-APP-000179-WSR-000110, SRG-APP-000439-WSR-000188
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.