VMware vSphere 6.7 RhttpProxy Security Technical Implementation Guide

The VMware vSphere 6.7 RhttpProxy Security Technical Implementation Guide (V1 R3) has 10 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

10STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R3

CurrentPublished Wed Jul 26 2023

The rhttpproxy must have logging enabled.

VMware vSphere 6.7 RhttpProxy Security Technical Implementation Guide

Assessment Title

Rule Text

The rhttpproxy must have logging enabled.

Description

Discussion Text

After a security incident has occurred, investigators will often review log files to determine what happened. The rhttpproxy must create logs upon service startup to capture information relevant to investigations.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-240721

Rule

SV-240721r879562_rule

Severity

medium

Rule Version

VCRP-67-000006

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

At the command prompt, execute the following command:

# xmllint --xpath '/config/log/outputToFiles' /etc/vmware-rhttpproxy/config.xml

Expected result:

<outputToFiles>true</outputToFiles>

If the output does not match the expected result, this is a finding.

Implementation Procedure

Fix Text

Navigate to and open /etc/vmware-rhttpproxy/config.xml.

Locate the <config>/<log> block and configure <outputToFiles> as follows:

<outputToFiles>true</outputToFiles>

Restart the service for changes to take effect.

# vmon-cli --restart rhttpproxy

STIG check 6 of 10 in the VMware vSphere 6.7 RhttpProxy STIG checklist

← Previous · V-240720The rhttpproxy must produce log records containing sufficient information to establish the source of events.Next · V-240722 →The rhttpproxy private key file must be protected from unauthorized access.