VMWare ESXi 5.0 Server Security Technical Implementation Guide

The VMWare ESXi 5.0 Server Security Technical Implementation Guide (V2 R1) has 133 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

133STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Wed Oct 27 2021

Access to the management network must be strictly controlled through a network jump box.

VMWare ESXi 5.0 Server Security Technical Implementation Guide

Assessment Title

Rule Text

Access to the management network must be strictly controlled through a network jump box.

Description

Discussion Text

Based upon an organization's risk assessment, jump boxes that run vSphere Client and other management clients (e.g., VSphere Management Assistant) must be configured. The management network must be isolated in order to prevent access by internal and external, unauthorized personnel.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-250565

Rule

SV-250565r798694_rule

Severity

medium

Rule Version

ESXI5-VMNET-000024

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Ask the SA if a management network jump box has been implemented and documented. Ask to see the documentation. Note that this check refers to an entity outside the scope of the ESXi server system.

If a management network jump box has not been implemented or documented, this is a finding.

Implementation Procedure

Fix Text

Implement and document a management network jump box solution. 
Note that this check refers to an entity outside the scope of the ESXi server system.

STIG check 24 of 133 in the VMWare ESXi 5.0 Server STIG checklist

← Previous · V-250564Access to the management network must be strictly controlled through a network gateway.Next · V-250566 →Spanning tree protocol must be enabled and BPDU guard and Portfast must be disabled on the upstream physical switch port for virtual machines that route or bridge traffic.