VMware ESX 3 Server

The VMware ESX 3 Server (V1 R2) has 630 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

630STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jul 22 2016

Persistent memory USB devices are not labeled in accordance with the classification level of the data they contain.

VMware ESX 3 Server

Assessment Title

Rule Text

Persistent memory USB devices are not labeled in accordance with the classification level of the data they contain.

Description

Discussion Text

If the persistent memory USB device is not labeled with the appropriate classification level this can lead to the compromise of sensitive data or the compromise of an IS that the device is attached.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-6771

Rule

SV-6993r1_rule

Severity

medium

Rule Version

USB01.006.00

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The reviewer will interview the IAO or SA to verify that the labeling of persistent memory USB devices is in accordance with the classification level of the data they contain.

Implementation Procedure

Fix Text

Label persistent memory USB devices in accordance with the classification level of the data they contain.  Disseminate this policy to all users.

STIG check 498 of 630 in the VMware ESX 3 Server STIG checklist

← Previous · V-6770Persistent memory USB devices are not treated as removable media and contrary to DODD 5200.1-R; the devices are not secured, transported, and sanitized in a manner appropriate for the classification level of the data they contain.Next · V-6772 →Sensitive data stored on a USB device with persistent memory, that the data owner requires encryption is not encrypted using NIST-certified cryptography.