Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-240247 | VRAU-LI-000220 | SV-240247r879588_rule | Medium |
Description |
---|
Lighttpd is used as the web server for vRealize Automation's Virtual Appliance Management Interface (vAMI). To segregate appliance management from appliance operation, Lighttpd can be configured to listen on a separate port. Port 5488 is the recommended port setting. |
STIG | Date |
---|---|
VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide | 2023-09-12 |
Check Text ( C-43480r667916_chk ) |
---|
At the command prompt, execute the following command: grep '^server.port' /opt/vmware/etc/lighttpd/lighttpd.conf If the value of "server.port" is not "5480", this is a finding. |
Fix Text (F-43439r667917_fix) |
---|
Navigate to and open /opt/vmware/etc/lighttpd/lighttpd.conf file Configure the lighttpd.conf file with the following: server.port = 5480 |