Details

Network traffic for storage should be segregated from normal VM and management traffic to limit access and ensure reliable performance. Documenting this expectation makes it more likely to be followed.

Solution

Run the following command using the uuid of the dedicated storage physical interface (pif):

xe pif-param-set uuid= other-config:management_purpose=’storage’

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CSCv6|3.1

Source

• Tenable.com/audits