1. Log in to the VM Access Proxy.
2. SSH into the container by issuing the command:

   sudo docker exec -it remoteaccess /bin/bash

3. Install the vim text editor inside the container:
   • Update the package list:

     apt-get update

   • Install vim:

     apt-get -y install vim

4. Edit the Tomcat web.xml configuration file:

   vim tomcat/webapps/RemoteAccess/WEB-INF/web.xml

5. Add the following contents before the </web-app> tag:

   <filter>  
       <filter-name>httpHeaderSecurity</filter-name>  
       <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>  
       <async-supported>true</async-supported>  
       <init-param>  
           <param-name>hstsEnabled</param-name>  
           <param-value>true</param-value>  
       </init-param>  
       <init-param>  
           <param-name>hstsMaxAgeSeconds</param-name>  
           <param-value>31536000</param-value>  
       </init-param>  
       <init-param>  
           <param-name>hstsIncludeSubDomains</param-name>  
           <param-value>true</param-value>  
       </init-param>  
   </filter>  
   
   <!-- The mapping for the HTTP header security Filter -->  
   
   <filter-mapping>  
       <filter-name>httpHeaderSecurity</filter-name>  
       <url-pattern>/*</url-pattern>  
       <dispatcher>REQUEST</dispatcher>  
   </filter-mapping>

6. Press ESC and enter :wq to save your changes.
7. Exit the container:

   exit

8. Restart the container:

   docker restart remoteaccess

9. Scan with security software to confirm the configuration or use Postman to ping the VM Access Proxy. Verify the response includes the HSTS header.
10. Log in to Commander and confirm that connections are successful.

Outcome

HSTS is enabled on the VM Access Proxy, strengthening security for remote connections.

Important! This configuration will not currently survive an upgrade of the VM Access Proxy, as the entire container for the application is replaced during upgrades, and HSTS support (or being enabled by default) is not yet available.