Cis Tomcat7 V100 6.4

---
name: cis-tomcat7-v100-6.4
description: "Ensure secure is set to true only for SSL-enabled Connectors"
category: cis-tomcat
version: "1.0.0"
author: cyberstrike-official
tags: [cis, tomcat, tomcat-7, ssl-tls]
cis_id: "6.4"
cis_benchmark: "CIS Apache Tomcat 7 Benchmark v1.0.0"
tech_stack: [tomcat, java]
cwe_ids: []
chains_with: []
prerequisites: []
severity_boost: {}
---

# CIS Apache Tomcat 7 - 6.4 Ensure secure is set to true only for SSL-enabled Connectors (Scored)

## Profile Applicability

- Level 1

## Description

Ensure secure is set to true only for SSL-enabled Connectors

## Rationale

See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.

## Audit Procedure

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 6.4 for audit commands.

## Remediation

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 6.4 for remediation steps.

## References

- CIS Apache Tomcat 7 Benchmark v1.0.0

## Assessment Status

- **Scored**
- **Profile**: Level 1