The Security Mode is not configured to “Hard” on the Sun Ray server.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-16151	SUN0190	SV-17140r1_rule	ECSC-1	High

Description
Soft security mode ensures that every client requesting a session gets one, even if security requirements cannot be met. As a result, the soft security mode grants insecure sessions. Hard security mode ensures that every session is secure. If security requirements cannot be met, the session is refused.

STIG	Date
Sun Ray 4 STIG	2015-04-02

Details

Check Text ( C-17191r1_chk )
Within the Sun Ray Administration console, perform the following: 1. Select the Advanced Tab. 2. Select the Security Tab. 3. Verify that “Security Mode” is configured to Hard. If it is not configured or set to soft, this is a finding.

Fix Text (F-16254r1_fix)
Configure Security Mode to Hard.