The operating system must isolate security functions from non-security functions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000134-ESXI5-PNF	SRG-OS-000134-ESXI5-PNF	SRG-OS-000134-ESXI5-PNF_rule		Medium

Description
Operating system management functionality includes functions necessary to administer the operating, network components, workstations, or servers, and typically requires privileged user access. The separation of user functionality from information system management functionality is either physical or logical and is accomplished by using different computers, different central processing units, different instances of the operating system, different network addresses, combinations of these methods, or other methods as appropriate. Permanent not a finding - The system management interface is already required to be isolated from production services hosted by VMs. There are no "users", and by extension, no user non-security functions.

Description

Operating system management functionality includes functions necessary to administer the operating, network components, workstations, or servers, and typically requires privileged user access. The separation of user functionality from information system management functionality is either physical or logical and is accomplished by using different computers, different central processing units, different instances of the operating system, different network addresses, combinations of these methods, or other methods as appropriate. Permanent not a finding - The system management interface is already required to be isolated from production services hosted by VMs. There are no "users", and by extension, no user non-security functions.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-SRG-OS-000134-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.

Fix Text (F-SRG-OS-000134-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.