VMware vCenter Server Version 5 Security Technical Implementation Guide

The VMware vCenter Server Version 5 Security Technical Implementation Guide (V1 R7) has 23 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

23STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R7

CurrentPublished Fri Apr 22 2016

Network access to the vCenter Server system must be restricted.

VMware vCenter Server Version 5 Security Technical Implementation Guide

Assessment Title

Rule Text

Network access to the vCenter Server system must be restricted.

Description

Discussion Text

Restrict access to only those essential components required to communicate with vCenter. Blocking access by unnecessary systems reduces the potential for general attacks on the operating system and minimizes risk.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-39560

Rule

SV-51418r1_rule

Severity

low

Rule Version

VCENTER-000022

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The vCenter Server must be protected by a network and/or local firewall on the vCenter Server Windows system. This protection must include IP-based access restrictions, enabling only necessary components to communicate with the vCenter Server system.

If the vCenter Server Windows system is not protected by a network and/or local firewall, this is a finding.

Implementation Procedure

Fix Text

The vCenter Server Windows system must be protected by utilizing a network and/or local firewall. Install the vCenter Server Windows system behind the firewall and/or install a firewall application on the Windows system. Firewall protections must include IP-based access restrictions, enabling only necessary components to communicate with the vCenter Server system.

STIG check 16 of 23 in the VMware vCenter Server Version 5 STIG checklist

← Previous · V-39559The use of Linux-based clients must be restricted.Next · V-39561 →A least-privileges assignment must be used for the vCenter Server database user.