What changed in VMware NSX 4.x Tier-0 Gateway Firewall STIG V1R2V1R2 changes

VMware NSX 4.x Tier-0 Gateway Firewall STIG V1R2 (2025-01-30) replaced V1R1 (2024-08-07): 4 checks added, 4 removed. It has 4 checks, against 4 in V1R1.

V1R2 checklistV1R1 checklist Compare V1R1 and V1R2 in STIG Compare

  • 4 added
  • 4 removed
  • 0 updated

Added in V1R2 (4)

  • V-265362CAT IIThe NSX Tier-0 Gateway Firewall must generate traffic log entries.
  • V-265367CAT IThe NSX Tier-0 Gateway Firewall must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks.
  • V-265368CAT IIThe NSX Tier-0 Gateway Firewall must deny network communications traffic by default and allow network communications traffic by exception.
  • V-265370CAT IIThe NSX Tier-0 Gateway Firewall must be configured to send traffic log entries to a central log server.

Removed since V1R1 (4)

  • V-263278CAT IIThe NSX Tier-0 Gateway Firewall must generate traffic log entries.
  • V-263279CAT IThe NSX Tier-0 Gateway Firewall must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks.
  • V-263280CAT IIThe NSX Tier-0 Gateway Firewall must deny network communications traffic by default and allow network communications traffic by exception.
  • V-263281CAT IIThe NSX Tier-0 Gateway Firewall must be configured to send traffic log entries to a central audit server.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R2 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.