What changed in VMware NSX 4.x Tier-1 Gateway Firewall STIG V1R2V1R2 changes

VMware NSX 4.x Tier-1 Gateway Firewall STIG V1R2 (2025-01-30) replaced V1R1 (2024-08-07): 5 checks added, 5 removed. It has 5 checks, against 5 in V1R1.

V1R2 checklistV1R1 checklist Compare V1R1 and V1R2 in STIG Compare

  • 5 added
  • 5 removed
  • 0 updated

Added in V1R2 (5)

  • V-265488CAT IIThe NSX Tier-1 Gateway firewall must generate traffic log entries.
  • V-265493CAT IThe NSX Tier-1 Gateway firewall must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks.
  • V-265494CAT IIThe NSX Tier-1 Gateway firewall must deny network communications traffic by default and allow network communications traffic by exception.
  • V-265496CAT IIThe NSX Tier-1 Gateway firewall must be configured to send traffic log entries to a central audit server.
  • V-265500CAT IIThe NSX Tier-1 Gateway firewall must be configured to inspect traffic at the application layer.

Removed since V1R1 (5)

  • V-263404CAT IIThe NSX Tier-1 Gateway firewall must generate traffic log entries.
  • V-263405CAT IThe NSX Tier-1 Gateway firewall must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks.
  • V-263406CAT IIThe NSX Tier-1 Gateway firewall must deny network communications traffic by default and allow network communications traffic by exception.
  • V-263407CAT IIThe NSX Tier-1 Gateway firewall must be configured to send traffic log entries to a central audit server.
  • V-263408CAT IIThe NSX Tier-1 Gateway firewall must be configured to inspect traffic at the application layer.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R2 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.