Home
Security Hardening
DISA STIG VMware vSphere VCenter 6.5 V2R2

DISA STIG VMware vSphere VCenter 6.5 V2R2

VCWN-65-000030 – The vCenter Server for Windows Administrator role must be secured and assigned to specific users other than a Windows Administrator.
Details By default, vCenter Server grants full administrative rights to the local administrator’s account, which can be accessed by domain...
VCWN-65-000031 – The vCenter Server for Windows must restrict the connectivity between Update Manager and public patch repositories by use of a separate Update Manager Download Server.
Details The Update Manager Download Service (UMDS) is an optional module of the Update Manager. UMDS downloads upgrades for virtual...
VCWN-65-000016 – The vCenter Server for Windows must only send NetFlow traffic to authorized collectors.
Details The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and...
VCWN-65-000032 – The vCenter Server for Windows must use a least-privileges assignment for the Update Manager database user.
Details Least-privileges mitigate attacks if the Update Manager database account is compromised. The VMware Update Manager requires certain privileges for...
VCWN-65-000052 – The vCenter Server for Windows must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.
Details Virtual machines might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and...
VCWN-65-000053 – The vCenter Server for Windows must enable the vSAN Health Check.
Details The vSAN Health Check is used for additional alerting capabilities, performance stress testing prior to production usage, and verifying...
VCWN-65-000054 – The vCenter Server for Windows must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List by use of an external proxy server.
Details The vSAN Health Check is able to download the hardware compatibility list from VMware in order to check compliance...
VCWN-65-000036 – The vCenter Server for Windows must produce audit records containing information to establish what type of events occurred.
Details Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading...
VCWN-65-000039 – The vCenter Server for Windows passwords must be at least 15 characters in length.
Details The shorter the password, the lower the number of possible combinations that need to be tested before the password...
VCWN-65-000040 – The vCenter Server for Windows passwords must contain at least one uppercase character.
Details To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated. The use of...

Prev Next

DISA STIG VMware vSphere VCenter 6.5 V2R2

VCWN-65-000030 – The vCenter Server for Windows Administrator role must be secured and assigned to specific users other than a Windows Administrator.

VCWN-65-000031 – The vCenter Server for Windows must restrict the connectivity between Update Manager and public patch repositories by use of a separate Update Manager Download Server.

VCWN-65-000016 – The vCenter Server for Windows must only send NetFlow traffic to authorized collectors.

VCWN-65-000032 – The vCenter Server for Windows must use a least-privileges assignment for the Update Manager database user.

VCWN-65-000052 – The vCenter Server for Windows must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.

VCWN-65-000053 – The vCenter Server for Windows must enable the vSAN Health Check.

VCWN-65-000054 – The vCenter Server for Windows must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List by use of an external proxy server.

VCWN-65-000036 – The vCenter Server for Windows must produce audit records containing information to establish what type of events occurred.

VCWN-65-000039 – The vCenter Server for Windows passwords must be at least 15 characters in length.

VCWN-65-000040 – The vCenter Server for Windows passwords must contain at least one uppercase character.