I was trying to find a CIS certified Apache Tomcat policy within the Qualys Policy Compliance Library, but to no avail. Can someone point me to an XML version of the CIS certified Apache Tomcat controls/policy?
Support for Apache Tomcat is being targeted around Feb-March 2015 time frame. User Defined Controls (UDCs) can be also leveraged to certain extent in the meantime.
Retrieving data ...