STIGQter: STIG Summary: VMware NSX-T Manager NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 26 Jul 2023:

The NSX-T Manager must be configured to conduct backups on an organizationally defined schedule.

DISA Rule

SV-251790r916221_rule

Vulnerability Number

V-251790

Group Title

SRG-APP-000516-NDM-000340

Rule Version

TNDM-3X-000093

Severity

CAT II

CCI(s)

CCI-000537 - Conduct backups of system-level information contained in the system per organization-defined frequency that is consistent with recovery time and recovery point objectives.
CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

To configure a backup destination, do the following:

From the NSX-T Manager web interface, go to System >> Backup and Restore, and then click "Edit" next to SFTP Server.

Enter the target SFTP server, Directory Path, Username, Password, SSH Fingerprint, and Passphrase, and then click "Save".

To configure a backup schedule do the following:

From the NSX-T Manager web interface, go to System >> Backup and Restore, and then click "Edit" next to Schedule.

Click the "Recurring Backup" toggle and configure an interval between backups. Enable "Detect NSX configuration change" to trigger backups on detection of configuration changes and specify an interval for detecting changes. Click "Save".

Check Contents

From the NSX-T Manager web interface, go to System >> Backup and Restore to view the backup configuration.

If backup is not configured and scheduled on a recurring frequency, this is a finding.

Vulnerability Number

V-251790

Documentable

False

Rule Version

TNDM-3X-000093

Severity Override Guidance

From the NSX-T Manager web interface, go to System >> Backup and Restore to view the backup configuration.

If backup is not configured and scheduled on a recurring frequency, this is a finding.

Check Content Reference

Target Key

5449