VMware ESXi Server 5.0 Security Technical Implementation Guide

The VMware ESXi Server 5.0 Security Technical Implementation Guide (V1 R10) has 133 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

133STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R10

CurrentPublished Fri Jan 27 2017

The system must have IEEE 1394 (Firewire) disabled unless needed.

VMware ESXi Server 5.0 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must have IEEE 1394 (Firewire) disabled unless needed.

Description

Discussion Text

Firewire is a common computer peripheral interface. Firewire devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-39291

Rule

SV-51107r1_rule

Severity

low

Rule Version

GEN008500-ESXI5-000123

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the system uses IEEE 1394, this is not applicable.

To verify hardware enabled options: Interrupt the host computer's boot process and enter the BIOS menu.  Inspect the menu option for IEEE 1394 device connectivity.

If the system does not use IEEE 1394 and IEEE 1394 is enabled, this is a finding.

Implementation Procedure

Fix Text

To modify hardware enabled options: Interrupt the host computer's boot process and enter the BIOS menu. Inspect the menu option for IEEE 1394 device connectivity.  Disable IEEE 1394.

STIG check 38 of 133 in the VMware ESXi Server 5.0 STIG checklist

← Previous · V-39289The system must have USB Mass Storage disabled unless needed.Next · V-39292 →NTP time synchronization must be configured.