STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jan 2024:

The vCenter server must disable SNMPv1/2 receivers.

DISA Rule

SV-256345r885646_rule

Vulnerability Number

V-256345

Group Title

SRG-APP-000575

Rule Version

VCSA-70-000265

Severity

CAT II

CCI(s)

• CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click "Edit".

On the "SNMP receivers" tab, ensure all receivers are disabled.

Check Contents

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click "Edit".

On the "SNMP receivers" tab, note the presence of any enabled receiver.

If there are any enabled receivers, this is a finding.

Vulnerability Number

V-256345

Documentable

False

Rule Version

VCSA-70-000265

Severity Override Guidance

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click "Edit".

On the "SNMP receivers" tab, note the presence of any enabled receiver.

If there are any enabled receivers, this is a finding.

Check Content Reference

M

Target Key

5517