Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-259801 | HPEN-NM-000223 | SV-259801r944975_rule | Medium |
Description |
---|
DOD requires that the Mission Owner uses only the cloud services offering listed in either the FedRAMP or DISA PA DOD Cloud Catalog to host Unclassified, public-releasable, DOD information. Management by "HPE Greenlake: Data Services Cloud Console" is enabled by default for HPE Alletra and must be disabled. |
STIG | Date |
---|---|
HPE Nimble Storage Array NDM Security Technical Implementation Guide | 2023-12-27 |
Check Text ( C-63532r944376_chk ) |
---|
Verify cloud console is disabled. Type "group --info |grep -i "cloud enabled". If the response is "cloud enabled: Yes", this is a finding. |
Fix Text (F-63439r944975_fix) |
---|
Disable Alletra cloud console. Type "group --edit --cloud_management off". If the response is as follows, contact your HPE sales account team to request approval: "ERROR: Failed to change system configuration. Updating cloud management is not permitted." |