What changed in VMware vSphere 6.7 RhttpProxy STIG V1R3V1R3 changes

VMware vSphere 6.7 RhttpProxy STIG V1R3 (2023-07-26) replaced V1R1 (2021-03-09): 1 check added, 1 updated. It has 10 checks, against 9 in V1R1.

V1R3 checklistV1R1 checklist Compare V1R1 and V1R3 in STIG Compare

  • 1 added
  • 0 removed
  • 1 updated

Updated fields: Check text 1

Added in V1R3 (1)

  • V-257282CAT IThe version of RhttpProxy running on the system must be a supported version.

Updated in V1R3 (1)

V-240719CAT IIThe rhttpproxy must use cryptography to protect the integrity of remote sessions.Check text

Check text

At the command prompt, execute the following command: # xmllint --xpath '/config/vmacore/ssl/protocols' /etc/vmware-rhttpproxy/config.xml Expected result: &ltprotocols>tls1.2&lt/protocols> IfOR XPath thereset is no output, this is NOT a finding.empty If the output does not match the expected result, this is a finding.

V-240719 in V1R3

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R3 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.