Home
Security Hardening
DISA STIG VMware vSphere VCenter 6.5 V2R2

DISA STIG VMware vSphere VCenter 6.5 V2R2

VCWN-65-000020 – The vCenter Server for Windows must not configure all port groups to VLAN values reserved by upstream physical switches.
Details Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For...
VCWN-65-000021 – The vCenter Server for Windows must enable SSL for Network File Copy (NFC).
Details NFC is the mechanism used to migrate or clone a VM between two ESXi hosts over the network. By...
VCWN-65-000022 – The vCenter Server for Windows services must be ran using a service account instead of a built-in Windows account.
Details You can use the Microsoft Windows built-in system account or a domain user account to run vCenter Server. The...
VCWN-65-000023 – The vCenter Server for Windows must configure the vpxuser auto-password to be changed every 30 days.
Details By default, the vpxuser password will be automatically changed by vCenter every 30 days. Ensure this setting meets your...
VCWN-65-000024 – The vCenter Server for Windows must configure the vpxuser password meets length policy.
Details The vpxuser password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet...
VCWN-65-000025 – The vCenter Server for Windows must disable the managed object browser at all times, when not required for the purpose of troubleshooting or maintenance of managed objects.
Details The managed object browser provides a way to explore the object model used by the vCenter to manage the...
VCWN-65-000026 – The vCenter Server for Windows must check the privilege re-assignment after restarts.
Details Check for privilege reassignment when you restart vCenter Server. If the user or user group that is assigned the...
VCWN-65-000027 – The vCenter Server for Windows must minimize access to the vCenter server.
Details After someone has logged in to the vCenter Server system, it becomes more difficult to prevent what they can...
VCWN-65-000028 – The vCenter Server for Windows Administrators must clean up log files after failed installations.
Details In certain cases, if the vCenter installation fails, a log file (with a name of the form ‘hs_err_pidXXXX’) is...
VCWN-65-000029 – The vCenter Server for Windows must enable all tasks to be shown to Administrators in the Web Client.
Details By default not all tasks are shown in the web client to administrators and only that user’s tasks will...

Prev Next

DISA STIG VMware vSphere VCenter 6.5 V2R2

VCWN-65-000020 – The vCenter Server for Windows must not configure all port groups to VLAN values reserved by upstream physical switches.

VCWN-65-000021 – The vCenter Server for Windows must enable SSL for Network File Copy (NFC).

VCWN-65-000022 – The vCenter Server for Windows services must be ran using a service account instead of a built-in Windows account.

VCWN-65-000023 – The vCenter Server for Windows must configure the vpxuser auto-password to be changed every 30 days.

VCWN-65-000024 – The vCenter Server for Windows must configure the vpxuser password meets length policy.

VCWN-65-000025 – The vCenter Server for Windows must disable the managed object browser at all times, when not required for the purpose of troubleshooting or maintenance of managed objects.

VCWN-65-000026 – The vCenter Server for Windows must check the privilege re-assignment after restarts.

VCWN-65-000027 – The vCenter Server for Windows must minimize access to the vCenter server.

VCWN-65-000028 – The vCenter Server for Windows Administrators must clean up log files after failed installations.

VCWN-65-000029 – The vCenter Server for Windows must enable all tasks to be shown to Administrators in the Web Client.