Hi all,
We have been asked to specify 'what security policy will be applied to Tomcat' in the context of us deploying vCenter Server Appliance 5.5. I have the 5.5 Hardening Guide which specifies a number of changes for vCSA e.g. SSO password changes, NTP etc. but does not address Tomcat. Is it possible to drill into tomcat config and apply industry-standard hardening there? I have seen posts re memory tweaks for tomcat for vCenter etc so I guess its possible to go to the CLI and get busy in config files. So does that mean we could tweak for hardening also??
Or can we assume VMware have pre-configured it, "locked it down" and there is nothing more we can do?
Any advice appreciated,
PD