UCF STIG Viewer Logo

The operating system must fail securely in the event of an operational failure of a boundary protection device.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-OS-000156-ESXI5-PF SRG-OS-000156-ESXI5-PF SRG-OS-000156-ESXI5-PF_rule Medium
Description
Fail secure is a condition achieved by the operating system employing a set of information system mechanisms to ensure, in the event of an operational failure of a boundary protection device at a managed interface, the system does not enter into an unsecure state where security properties no longer hold. Applicable, but permanent finding - The hypervisor does not support this functionality.
STIG Date
VMware ESXi v5 Security Technical Implementation Guide 2013-01-15

Details

Check Text ( C-SRG-OS-000156-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.
Fix Text (F-SRG-OS-000156-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.