What changed in VMware NSX 4.x Tier-1 Gateway Router STIG V1R2V1R2 changes

VMware NSX 4.x Tier-1 Gateway Router STIG V1R2 (2025-01-30) replaced V1R1 (2024-08-07): 4 checks added, 4 removed. It has 4 checks, against 4 in V1R1.

V1R2 checklistV1R1 checklist Compare V1R1 and V1R2 in STIG Compare

  • 4 added
  • 4 removed
  • 0 updated

Added in V1R2 (4)

  • V-265518CAT IThe NSX Tier-1 Gateway router must be configured to have all inactive interfaces removed.
  • V-265529CAT IIIThe NSX Tier-1 Gateway router must be configured to have the DHCP service disabled if not in use.
  • V-265604CAT IIIThe NSX Tier-1 Gateway router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.
  • V-265608CAT IIIThe NSX Tier-1 Gateway router must be configured to have multicast disabled if not in use.

Removed since V1R1 (4)

  • V-263423CAT IThe NSX Tier-1 Gateway router must be configured to have all inactive interfaces removed.
  • V-263424The NSX Tier-1 Gateway router must be configured to have the DHCP service disabled if not in use.
  • V-263425The NSX Tier-1 Gateway router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.
  • V-263426The NSX Tier-1 Gateway router must be configured to have multicast disabled if not in use.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R2 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.