Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-89275 | VRAU-LI-000220 | SV-99925r1_rule | Medium |
Description |
---|
Lighttpd is used as the web server for vRealize Automation's Virtual Appliance Management Interface (vAMI). To segregate appliance management from appliance operation, Lighttpd can be configured to listen on a separate port. Port 5488 is the recommended port setting. |
STIG | Date |
---|---|
VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide | 2018-10-12 |
Check Text ( C-88967r1_chk ) |
---|
At the command prompt, execute the following command: grep '^server.port' /opt/vmware/etc/lighttpd/lighttpd.conf If the value of "server.port" is not "5480", this is a finding. |
Fix Text (F-96017r1_fix) |
---|
Navigate to and open /opt/vmware/etc/lighttpd/lighttpd.conf file Configure the lighttpd.conf file with the following: server.port = 5480 |