The operating system must conduct backups of system-level information contained in the information system per organization-defined frequency to conduct backups that are consistent with recovery time and recovery point objectives.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000100-ESXI5-PNF	SRG-OS-000100-ESXI5-PNF	SRG-OS-000100-ESXI5-PNF_rule		Medium

Description
Operating system backup is a critical step in maintaining data assurance and availability. System-level information includes system-state information, operating system and application software, and licenses. Backups must be consistent with organizational recovery time and recovery point objectives. Permanent not a finding - This function is automated by default. To ensure persistence, auto-backup.sh and backup.sh scripts are (by default) executed via cron every 60 and 10 minutes, respectively. GEN000220-ESXI5-000064 requirement is for regularly scheduled (file integrity) backups, not to exceed 1 week (organization-defined frequency).

Description

Operating system backup is a critical step in maintaining data assurance and availability. System-level information includes system-state information, operating system and application software, and licenses. Backups must be consistent with organizational recovery time and recovery point objectives. Permanent not a finding - This function is automated by default. To ensure persistence, auto-backup.sh and backup.sh scripts are (by default) executed via cron every 60 and 10 minutes, respectively. GEN000220-ESXI5-000064 requirement is for regularly scheduled (file integrity) backups, not to exceed 1 week (organization-defined frequency).

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-SRG-OS-000100-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.

Fix Text (F-SRG-OS-000100-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.