STIGQter: STIG Summary: VMware NSX-T Manager NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 26 Jul 2023:

The NSX-T Manager must disable SNMP v2.

DISA Rule

SV-251799r879588_rule

Vulnerability Number

V-251799

Group Title

SRG-APP-000142-NDM-000245

Rule Version

TNDM-3X-000102

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

From the NSX-T Manager web interface, go to the System >> Fabric >> Profiles >> Node Profiles.

Click on "All NSX Nodes" and delete and v2c Polling or Trap configurations.

Check Contents

From the NSX-T Manager web interface, go to the System >> Fabric >> Profiles >> Node Profiles.

Click "All NSX Nodes" and view the SNMP Polling and Traps configuration.

If SNMP v2c Polling or Traps are configured, this is a finding.

Vulnerability Number

V-251799

Documentable

False

Rule Version

TNDM-3X-000102

Severity Override Guidance

From the NSX-T Manager web interface, go to the System >> Fabric >> Profiles >> Node Profiles.

Click "All NSX Nodes" and view the SNMP Polling and Traps configuration.

If SNMP v2c Polling or Traps are configured, this is a finding.

Check Content Reference

M

Target Key

5449