Details

A controlled gateway or other controlled method must be configured to access the management network. The management network must be isolated in order to prevent access by internal and external, unauthorized personnel.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Implement and document a controlled gateway or other controlled access method to the management network. Note that this check refers to an entity outside the scope of the ESXi server system.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_ESXi5_Server_V2R1_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system VMware.

References

• 800-53|CM-6b.
• CAT|II
• CCI|CCI-000366
• Group-ID|V-39400
• Rule-ID|SV-250564r798691_rule
• STIG-ID|ESXI5-VMNET-000023
• STIG-Legacy|SV-51258
• STIG-Legacy|V-39400
• Vuln-ID|V-250564

Source

• Tenable.com/audits