Secure Values for MBean Attributes

The following table lists MBean attributes that affect the security of a WebLogic Server domain. For each attribute, the table lists the most secure value.

ClusterMBean	SecureReplicationEnabled Secure value: true
DefaultAuditorMBean	FailureAuditSeverityEnabled Secure value: true Severity Secure value: CUSTOM WarningAuditSeverityEnabled Secure value: true ErrorAuditSeverityEnabled Secure value: true
DistributedQueueBean	ForwardDelay Secure value: -1
DomainMBean	AdministrationPortEnabled Secure value: true ConfigurationAuditType Secure value: audit
JMSConnectionFactoryMBean	FlowMaximum Secure value: 500 AcknowledgePolicy Secure value: All
JMSDistributedQueueMBean	ForwardDelay Secure value: -1
JoltConnectionPoolMBean	SecurityContextEnabled Secure value: true
KernelMBean	IdleConnectionTimeout Secure value: 65 LogRemoteExceptionsEnabled Secure value: true MaxMessageSize Secure value: 10000000 StdoutSeverityLevel Secure value: 32
MessagingBridgeMBean	QualityOfService Secure value: Exactly-once
NetworkAccessPointMBean	TwoWaySSLEnabled Secure value: true ClientCertificateEnforced Secure value: true Protocol Secure value: t3s
NetworkChannelMBean	MaxHTTPMessageSize Secure value: 10000000 LoginTimeoutMillis Secure value: 5000 TunnelingClientTimeoutSecs Secure value: 40 CompleteHTTPMessageTimeout Secure value: 60 CompleteT3MessageTimeout Secure value: 60 LoginTimeoutMillisSSL Secure value: 25000 MaxCOMMessageSize Secure value: 10000000 CompleteCOMMessageTimeout Secure value: 60 MaxT3MessageSize Secure value: 10000000
NodeManagerMBean	ListenAddress Secure value: 127.0.0.1 or ::1
PartitionMBean	PartitionLifeCycleTimeoutVal Secure value: 120
QueueBean	ForwardDelay Secure value: -1
RealmMBean	DelegateMBeanAuthorization Secure value: true
ServerDebugMBean	DebugXMLRegistryUseShortClass Secure value: true DebugXMLRegistryIncludeName Secure value: true MagicThreadDumpHost Secure value: 127.0.0.1 MagicThreadDumpFile Secure value: debugMagicThreadDumpFile DebugJAXPDebugLevel Secure value: 0 DebugXMLEntityCacheUseShortClass Secure value: true DebugEmbeddedLDAPLogLevel Secure value: 0 DebugJAXPUseShortClass Secure value: true DebugXMLEntityCacheIncludeName Secure value: true DebugXMLRegistryDebugLevel Secure value: 0 DebugJAXPIncludeName Secure value: true DebugXMLEntityCacheDebugLevel Secure value: 0
ServerMBean	IdleConnectionTimeout Secure value: 65 DefaultInternalServletsDisabled Secure value: true StdoutSeverityLevel Secure value: 32 ClasspathServletSecureModeEnabled Secure value: true UploadDirectoryName Secure value: An absolute directory that is outside the root directory of any WebLogic Server instance or application, and that resides on a physical disk that is separate from the WebLogic Server host's system disk. LowMemoryGranularityLevel Secure value: 5 JavaCompiler Secure value: javac LowMemoryGCThreshold Secure value: 5 MaxMessageSize Secure value: 10000000 LoginTimeoutMillis Secure value: 5000 ClasspathServletDisabled Secure value: true ServerLifeCycleTimeoutVal Secure value: 120 LogRemoteExceptionsEnabled Secure value: true AdministrationPort Secure value: 7002 TGIOPEnabled Secure value: true ManagedServerIndependenceEnabled Secure value: true
ServerTemplateMBean	IdleConnectionTimeout Secure value: 65 DefaultInternalServletsDisabled Secure value: true StdoutSeverityLevel Secure value: 32 ClasspathServletSecureModeEnabled Secure value: true UploadDirectoryName Secure value: An absolute directory that is outside the root directory of any WebLogic Server instance or application, and that resides on a physical disk that is separate from the WebLogic Server host's system disk. LowMemoryGranularityLevel Secure value: 5 JavaCompiler Secure value: javac LowMemoryGCThreshold Secure value: 5 MaxMessageSize Secure value: 10000000 LoginTimeoutMillis Secure value: 5000 ClasspathServletDisabled Secure value: true ServerLifeCycleTimeoutVal Secure value: 120 LogRemoteExceptionsEnabled Secure value: true AdministrationPort Secure value: 7002 TGIOPEnabled Secure value: true ManagedServerIndependenceEnabled Secure value: true
SNMPAgentDeploymentMBean	CommunityPrefix Secure value: A unique value, should not be public or private DebugLevel Secure value: 0
SNMPAgentMBean	CommunityPrefix Secure value: A unique value, should not be public or private DebugLevel Secure value: 0
SNMPTrapDestinationMBean	Host Secure value: 127.0.0.1 or ::1
SSLMBean	TwoWaySSLEnabled Secure value: true ClientCertificateEnforced Secure value: true Enabled Secure value: true
SystemPasswordValidatorMBean	MinAlphabeticCharacters Secure value: 1 MinLowercaseCharacters Secure value: 1 MaxPasswordLength Secure value: 12 MaxInstancesOfAnyCharacter Secure value: 4 MinNumericCharacters Secure value: 1 MaxConsecutiveCharacters Secure value: 3 MinNonAlphanumericCharacters Secure value: 1 MinUppercaseCharacters Secure value: 1 RejectEqualOrContainUsername Secure value: true MinPasswordLength Secure value: 6 RejectEqualOrContainReverseUsername Secure value: true MinNumericOrSpecialCharacters Secure value: 1
UniformDistributedQueueBean	ForwardDelay Secure value: -1
UnixMachineMBean	PostBindUIDEnabled Secure value: true PostBindGIDEnabled Secure value: true
VirtualHostMBean	LoggingEnabled Secure value: true KeepAliveSecs Secure value: 30 PostTimeoutSecs Secure value: 30 HttpsKeepAliveSecs Secure value: 60 KeepAliveEnabled Secure value: true AuthCookieEnabled Secure value: true
WebAppContainerMBean	PostTimeoutSecs Secure value: 30 AuthCookieEnabled Secure value: true
WebServerLogMBean	LoggingEnabled Secure value: true
WebServerMBean	LoggingEnabled Secure value: true KeepAliveSecs Secure value: 30 PostTimeoutSecs Secure value: 30 HttpsKeepAliveSecs Secure value: 60 KeepAliveEnabled Secure value: true AuthCookieEnabled Secure value: true
WTCLocalTuxDomMBean	Security Secure value: DM_PW MinEncryptBits Secure value: 40 MaxEncryptBits Secure value: 128
WTCRemoteTuxDomMBean	MinEncryptBits Secure value: 40
WTCtBridgeGlobalMBean	Timeout Secure value: 60