Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
VCENTER-000022 | VCENTER-000022 | VCENTER-000022_rule | Low |
Description |
---|
Restrict access to only those essential components required to communicate with vCenter. Blocking access by unnecessary systems reduces the potential for general attacks on the operating system and minimizes risk. |
STIG | Date |
---|---|
VMware vCenter Server Security Technical Implementation Guide | 2013-01-15 |
Check Text ( C-VCENTER-000022_chk ) |
---|
The vCenter Server must be protected by a network and/or local firewall on the vCenter Server Windows system. This protection must include IP-based access restrictions, enabling only necessary components to communicate with the vCenter Server system. If the vCenter Server Windows system is not protected by a network and/or local firewall, this is a finding. |
Fix Text (F-VCENTER-000022_fix) |
---|
The vCenter Server Windows system must be protected by utilizing a network and/or local firewall. Install the vCenter Server Windows system behind the firewall and/or install a firewall application on the Windows system. Firewall protections must include IP-based access restrictions, enabling only necessary components to communicate with the vCenter Server system. |