SAN resources must be masked and zoned appropriately.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-39304 | SRG-OS-99999-ESXI5-000150 | SV-51120r1_rule | Low |
| Description |
|---|
| SAN activity must be segregated via zoning and LUN masking. The potential for any SAN client to mount and access any SAN drive will result in disk resource contention and data corruption. Zoning and LUN masking must be used to isolate and protect SAN storage devices. Use of zoning must also take into account any host groups on the SAN device(s). |
| STIG | Date |
|---|---|
| VMware ESXi Server 5.0 Security Technical Implementation Guide | 2017-01-06 |
Details
| Check Text ( C-46568r1_chk ) |
|---|
| Zoning and masking capabilities for each SAN switch and disk array are vendor specific. Ask the SA if a SAN device is used to support hosts. If a SAN device is deployed and zoning/masking is not used, this is a finding. If SAN devices are not used, this is not a finding. |
| Fix Text (F-44283r1_fix) |
|---|
| If SAN devices are used, a vendor-specific procedure must be developed and documented to mask/zone host LUNs. |