Network access to the vCenter Server system must be restricted.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-39560	VCENTER-000022	SV-51418r1_rule		Low

Description
Restrict access to only those essential components required to communicate with vCenter. Blocking access by unnecessary systems reduces the potential for general attacks on the operating system and minimizes risk.

STIG	Date
VMware vCenter Server Version 5 Security Technical Implementation Guide	2013-12-18

Details

Check Text ( C-46785r1_chk )
The vCenter Server must be protected by a network and/or local firewall on the vCenter Server Windows system. This protection must include IP-based access restrictions, enabling only necessary components to communicate with the vCenter Server system. If the vCenter Server Windows system is not protected by a network and/or local firewall, this is a finding.

Fix Text (F-44573r1_fix)
The vCenter Server Windows system must be protected by utilizing a network and/or local firewall. Install the vCenter Server Windows system behind the firewall and/or install a firewall application on the Windows system. Firewall protections must include IP-based access restrictions, enabling only necessary components to communicate with the vCenter Server system.