VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide

The VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide (V1 R2) has 55 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

55STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Oct 25 2023 What changed in V1R2

The HAProxy baseline must be documented and maintained.

VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide

Assessment Title

Rule Text

The HAProxy baseline must be documented and maintained.

Description

Discussion Text

Without maintenance of a baseline of current HAProxy software, monitoring for changes cannot be complete and unauthorized changes to the software can go undetected. Changes to HAProxy could be the result of intentional or unintentional actions.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-240067

Rule

SV-240067r879640_rule

Severity

medium

Rule Version

VRAU-HA-000275

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Have the appliance administrator and/or ISSO provide the HAProxy software baseline procedures, implementation evidence, and a list of files and directories included in the baseline procedure for completeness.

If baseline procedures do not exist, not implemented reliably, or are not complete, this is a finding.

Implementation Procedure

Fix Text

Develop, document, and implement baseline procedures that include all HAProxy software files and directories.

Update the baseline after new installations, upgrades, or maintenance activities that include changes to the software baseline.

STIG check 29 of 55 in the VMW vRealize Automation 7.x HA Proxy STIG checklist

← Previous · V-240066HAProxy must prohibit anonymous users from editing system files.Next · V-240068 →HAProxy must be configured to validate the configuration files during start and restart events.