Proxy ARP must not be enabled on the system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| GEN003608-ESXI5-PNF | GEN003608-ESXI5-PNF | GEN003608-ESXI5-PNF_rule | Medium |
| Description |
|---|
| Proxy ARP allows a system to respond to ARP requests on one interface on behalf of hosts connected to another interface. If this function is enabled when not required, addressing information may be leaked between the attached network segments. Applicable, but permanent not-a-finding - The hypervisor does not support this function (No ARP command). |
| STIG | Date |
|---|---|
| VMware ESXi v5 Security Technical Implementation Guide | 2013-01-15 |
Details
| Check Text ( C-GEN003608-ESXI5-PNF_chk ) |
|---|
| ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding. |
| Fix Text (F-GEN003608-ESXI5-PNF_fix) |
|---|
| This requirement is permanent not a finding. No fix is required. |