Check: SUN0030
Sun Ray 4 STIG:
SUN0030
(in version v1 r2)
Title
User tokens are not forced to authenticate to the Sun Ray Server. (Cat III impact)
Discussion
The Sun Ray Server must be configured to permit access only to smart cards that are registered in the Sun Ray Datastore.
Check Content
Within the Sun Ray Administration console, perform the following: 1. Select the Advanced Tab. 2. Select the System Policy Tab. 3. Verify the Card Users Access has "Users with Registered Tokens" selected. 4. If Access is set to "None" or "All Users", this is a finding
Fix Text
Within the Sun Ray Administration console, perform the following: 1. Select the Advanced Tab. 2. Select the System Policy Tab. 3. Check the Card Users Access for “Users with Registered Tokens"
Additional Identifiers
Rule ID:
Vulnerability ID: V-16062
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| No CCIs are assigned to this check |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| No controls are assigned to this check |