VMware ESX 3 Virtual Machine

The VMware ESX 3 Virtual Machine (V1 R2) has 7 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

7STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jul 22 2016

Virtual machines are not configured with the correct posture in VMS.

VMware ESX 3 Virtual Machine

Assessment Title

Rule Text

Virtual machines are not configured with the correct posture in VMS.

Description

Discussion Text

Correctly configuring virtual machine assets in VMS will ensure that the appropriate vulnerabilities are assigned to the asset. If the asset is not configured with the correct posture, vulnerabilities may be open on the asset. These open vulnerabilities may allow an attacker access to the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-17043

Rule

SV-18043r1_rule

Severity

medium

Rule Version

ESX1220

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the correct postures are configured for virtual machine assets.  If there are many assets, check a sampling of the total virtual machines registered. 

    UNIX (Linux or Unix) or Windows (Windows OS Version)
    VMware Virtual Machine

If the virtual machine is not registered or is not registered properly, this is a finding.

Implementation Procedure

Fix Text

Configure the virtual machine with the proper posture in VMS.

STIG check 6 of 7 in the VMware ESX 3 Virtual Machine STIG checklist

← Previous · V-15932OS patches and updates are out of date on "off" and "suspended" virtual machines.Next · V-68727 →VMware ESX virtual machines that are no longer supported by the vendor for security updates must not be installed on a system.