nkululeko

Micro Focus Frequent Contributor
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2020-10-29
13:31
366 views
How to Enable HSTS in ESM 7.2
Hi All
How does one enable ESM to use Strict Transport Security on port 8443 ?
Thanks
2 Replies
Ionut Daniel Mosoiu

Fleet Admiral
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2020-11-01
22:26
Hello,
ESM is always communication on 8443 SSL and is not using unencrypted communication.
Can you please what you relay want to achieve and what exactly did you seen ?
Best Regards,
Daniel
LewisJ

Micro Focus Frequent Contributor
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2020-12-14
04:14
Hi @nkululeko,
you can enable HSTS in the latest version of Arcsight ESM 7.4 by adding
"hsts.enabled=true"
to your server.properties files under (if default) /opt/arcsight/manager/config
If you search previous versions of the Arcsight ESM Administrators guide you should be able to find if earlier versions support it.
Also be aware that, HSTS will not work with Self-signed certificates, and is primarily aimed at environments that have CA issued certificates, not the default ESM generated self signed ones.
you can enable HSTS in the latest version of Arcsight ESM 7.4 by adding
"hsts.enabled=true"
to your server.properties files under (if default) /opt/arcsight/manager/config
If you search previous versions of the Arcsight ESM Administrators guide you should be able to find if earlier versions support it.
Also be aware that, HSTS will not work with Self-signed certificates, and is primarily aimed at environments that have CA issued certificates, not the default ESM generated self signed ones.