From: brennan stewart (brennan@ideahamster.org)
Date: Sat Sep 11 2004 - 13:50:31 EDT
Since Websphere is rolled out as a system, here are the resources I
used from a recent VA (probably overkill)
Websphere App server = IBM redbook, IBM articles on configuration,
guides on web application server configs (turned into checklists)
UNIX/Linux system = Guides/Checklist(s) from standard sources/CO SOP
for each host/scripts
DB = Checklist(s) from standard sources/CO SOP
for each DB/custom SQL scripts
Apache = Checklist(s)/Guide
Actual web app = OWASP guide
Overall process = OSSTMM
With the exception of the vuln scanner, everything used was open
source/public domain (and if I had it my way, that would be too)
-b
On Thu, 2004-09-02 at 00:19, Robert.L.Grill@wellsfargo.com wrote:
> Does anyone have any good guides to Websphere security configuration
> files ?
>
> Thanks
>
>
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:05 EDT