UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The operating system must fail securely in the event of an operational failure of a boundary protection device.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-OS-000156-ESXI5-PF SRG-OS-000156-ESXI5-PF SRG-OS-000156-ESXI5-PF_rule Medium
Description
Fail secure is a condition achieved by the operating system employing a set of information system mechanisms to ensure, in the event of an operational failure of a boundary protection device at a managed interface, the system does not enter into an unsecure state where security properties no longer hold. Applicable, but permanent finding - The hypervisor does not support this functionality.
STIG Date
VMware ESXi v5 Security Technical Implementation Guide 2013-01-15

Details

Check Text ( C-SRG-OS-000156-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.
Fix Text (F-SRG-OS-000156-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.