STIGQter: STIG Summary: VMW vRealize Automation 7.x vIDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

vIDM, when installed in a MAC I system, must be in a high-availability (HA) cluster.

DISA Rule

SV-100943r1_rule

Vulnerability Number

V-90293

Group Title

SRG-APP-000435-AS-000069

Rule Version

VRAU-VI-000550

Severity

CAT I

CCI(s)

• CCI-002385 - The information system protects against or limits the effects of organization-defined types of denial of service attacks by employing organization-defined security safeguards.

Weight

10

Fix Recommendation

If vRA is not installed in a MAC I system, this is Not Applicable.

Interview the ISSO. Obtain the correct configuration for clustering used by the site.

Configure vRealize Automation to be in compliance with the clustering design provided by the ISSO.

Check Contents

If vRA is not installed in a MAC I system, this is Not Applicable.

Interview the ISSO. Obtain the correct configuration for clustering used by the site.

Review the vRealize Automation appliance's installation, environment, and configuration. Determine if vRA clustering has been correctly implemented.

If vRA is not correctly implementing clustering, this is a finding.

Vulnerability Number

V-90293

Documentable

False

Rule Version

VRAU-VI-000550

Severity Override Guidance

If vRA is not installed in a MAC I system, this is Not Applicable.

Interview the ISSO. Obtain the correct configuration for clustering used by the site.

Review the vRealize Automation appliance's installation, environment, and configuration. Determine if vRA clustering has been correctly implemented.

If vRA is not correctly implementing clustering, this is a finding.

Check Content Reference

M

Target Key

3451

Comments