VMware ESX 3 Policy

The VMware ESX 3 Policy (V1 R2) has 24 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

24STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jul 22 2016

VirtualCenter Server groups are not reviewed monthly

VMware ESX 3 Policy

Assessment Title

Rule Text

VirtualCenter Server groups are not reviewed monthly

Description

Discussion Text

Reviewing the VirtualCenter groups will ensure that no unauthorized users have been granted access to objects.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-15877

Rule

SV-16818r1_rule

Severity

medium

Rule Version

ESX0780

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Ask the IAO/SA how often the following groups are reviewed on the VirtualCenter Server:

Windows Administrators group,
Database Administrators,
Virtual Machine Administrators,
Resource Pool Administrators,
ESX Administrators,
Virtual Machine Power Users, and
All Custom Roles.

If these groups are not reviewed at least monthly, this is a finding.

Implementation Procedure

Fix Text

Review the VirtualCenter groups monthly.

STIG check 9 of 24 in the VMware ESX 3 Policy STIG checklist

← Previous · V-15876Users in the VirtualCenter Server Windows Administrators group are not documented.Next · V-15878 →No documented configuration management process exists for VirtualCenter changes.