STIGQter: STIG Summary: HPE Nimble Storage Array NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

HPE Nimble must be configured to disable HPE InfoSight.

DISA Rule

SV-252902r960966_rule

Vulnerability Number

V-252902

Group Title

SRG-APP-000142-NDM-000245

Rule Version

HPEN-NM-000221

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

In HPE Nimble Storage arrays, data collection is disabled by default.

Navigate to Administration >> Alerts and Monitoring page of the storage array management interface.

Uncheck the checkbox.

Check Contents

Navigate to Administration >> Alerts and Monitoring page of the storage array management interface. Verify the checkbox is not checked.

If HPE InfoSight is enabled, this is a finding.

Vulnerability Number

V-252902

Documentable

False

Rule Version

HPEN-NM-000221

Severity Override Guidance

Navigate to Administration >> Alerts and Monitoring page of the storage array management interface. Verify the checkbox is not checked.

If HPE InfoSight is enabled, this is a finding.

Check Content Reference

M

Target Key

5460