VMware NSX-T Manager NDM Security Technical Implementation Guide

The VMware NSX-T Manager NDM Security Technical Implementation Guide (V1 R3) has 23 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

23STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R3

CurrentPublished Wed Jul 26 2023

The NSX-T Manager must disable SNMP v2.

VMware NSX-T Manager NDM Security Technical Implementation Guide

Assessment Title

Rule Text

The NSX-T Manager must disable SNMP v2.

Description

Discussion Text

SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. As such, SNMPv1/2 receivers must be disabled.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251799

Rule

SV-251799r879588_rule

Severity

medium

Rule Version

TNDM-3X-000102

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the NSX-T Manager web interface, go to the System >> Fabric >> Profiles >> Node Profiles.

Click "All NSX Nodes" and view the SNMP Polling and Traps configuration.

If SNMP v2c Polling or Traps are configured, this is a finding.

Implementation Procedure

Fix Text

From the NSX-T Manager web interface, go to the System >> Fabric >> Profiles >> Node Profiles.

Click on "All NSX Nodes" and delete and v2c Polling or Trap configurations.

STIG check 22 of 23 in the VMware NSX-T Manager NDM STIG checklist

← Previous · V-251798The NSX-T Manager must disable TLS 1.1 and enable TLS 1.2.Next · V-251800 →The NSX-T Manager must enable the global FIPS compliance mode for load balancers.