WebLogic Web服务器安全配置基线

目 录

第1章 概述 ..........................................................................................................................................................1 1.1 1.2 1.3 1.4 1.5

目的 ..........................................................................................................................................................1 适用范围 .................................................................................................................................................1 适用版本 .................................................................................................................................................1 实施 ..........................................................................................................................................................1 例外条款 .................................................................................................................................................1

第2章 账号管理、认证授权...........................................................................................................................2 2.1 2.2

账号 ..........................................................................................................................................................2

2.1.1 2.2.1

账号锁定策略 ...............................................................................................................................2 密码复杂度 ...................................................................................................................................2

口令 ..........................................................................................................................................................2

第3章 日志配置操作 ........................................................................................................................................4 3.1

日志配置 .................................................................................................................................................4

3.1.1 第4章 4.1

审核登录 ........................................................................................................................................4

IP协议安全配置 ..............................................................................................................................5

IP协议 .....................................................................................................................................................5

4.1.1 4.1.2 4.1.3

支持加密协议 ...............................................................................................................................5 限制应用服务器Socket数量....................................................................................................5 禁用Send Server Header ............................................................................................................6

第5章 设备其他配置操作 ...............................................................................................................................7 5.1

安全管理 .................................................................................................................................................7

5.1.1 5.1.2 5.1.3 5.1.4

定时登出 ........................................................................................................................................7 更改默认端口 ...............................................................................................................................7 错误页面处理 ...............................................................................................................................8 目录列表访问限制 ......................................................................................................................8

第6章 评审与修订.............................................................................................................................................8