STIGQter: STIG Summary: VMware NSX-T Manager NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 26 Jul 2023:

The NSX-T Manager must disable SSH.

DISA Rule

SV-251796r879588_rule

Vulnerability Number

V-251796

Group Title

SRG-APP-000142-NDM-000245

Rule Version

TNDM-3X-000099

Severity

CAT III

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

From an NSX-T Manager shell, run the following command(s):

> stop service ssh
> clear service ssh start-on-boot

Check Contents

From an NSX-T Manager shell, run the following command(s):

> get service ssh

Expected results:
Service name: ssh
Service state: stopped
Start on boot: False

If the output does not match the expected results, this is a finding.

Vulnerability Number

V-251796

Documentable

False

Rule Version

TNDM-3X-000099

Severity Override Guidance

From an NSX-T Manager shell, run the following command(s):

> get service ssh

Expected results:
Service name: ssh
Service state: stopped
Start on boot: False

If the output does not match the expected results, this is a finding.

Check Content Reference

M

Target Key

5449