The Samba Web Administration Tool (SWAT) must be restricted to the local host or require SSL.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| GEN006080-ESXI5-PNF | GEN006080-ESXI5-PNF | GEN006080-ESXI5-PNF_rule | Medium |
| Description |
|---|
| SWAT is a tool used to configure Samba. As it modifies Samba configuration, which can impact system security, it must be protected from unauthorized access. SWAT authentication may involve the root password, which must be protected by encryption when traversing the network. Applicable, but permanent not-a-finding- The hypervisor does not support this function (No Samba SWAT). |
| STIG | Date |
|---|---|
| VMware ESXi v5 Security Technical Implementation Guide | 2013-01-15 |
Details
| Check Text ( C-GEN006080-ESXI5-PNF_chk ) |
|---|
| ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding. |
| Fix Text (F-GEN006080-ESXI5-PNF_fix) |
|---|
| This requirement is permanent not a finding. No fix is required. |