VMware vSphere ESXi 6.0 Security Technical Implementation Guide

The VMware vSphere ESXi 6.0 Security Technical Implementation Guide (V1 R5) has 108 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

108STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R5

CurrentPublished Fri Jan 25 2019

The system must protect the confidentiality and integrity of transmitted information.

VMware vSphere ESXi 6.0 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must protect the confidentiality and integrity of transmitted information.

Description

Discussion Text

There are now six types of management VMkernels that can be created for different types of traffic. In order to protect these types of management traffic admins must logically separate these onto different networks and dedicate VMkernel ports to each.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-63271

Rule

SV-77761r1_rule

Severity

low

Rule Version

ESXI-06-000051

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the vSphere Web Client select the ESXi Host and go to Manage >> Networking >> VMkernel adapters.  Review each VMkernel adapter that is defined and ensure it is enabled for only one type of management traffic.

If any VMkernel is used for more than one type of management traffic, this is a finding.

Implementation Procedure

Fix Text

From the vSphere Web Client select the ESXi Host and go to Manage >> Networking >> VMkernel adapters >> Select a VMkernel Adapter >> Click Edit >> Uncheck any additional services that have been enabled on the VMkernel adapter so that there is only one service left checked.

STIG check 51 of 108 in the VMware vSphere ESXi 6.0 STIG checklist

← Previous · V-63269The system must protect the confidentiality and integrity of transmitted information by protecting IP based management traffic.Next · V-63273 →The system must protect the confidentiality and integrity of transmitted information by utilizing different TCP/IP stacks where possible.