STIGQter: STIG Summary: HPE Nimble Storage Array NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

HPE Nimble must not be configured to use "HPE Greenlake: Data Services Cloud Console".

DISA Rule

SV-259800r960966_rule

Vulnerability Number

V-259800

Group Title

SRG-APP-000142-NDM-000245

Rule Version

HPEN-NM-000222

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Disable cloud console
Navigate to Administration >> Customization >> Data Services Cloud Console.

Uncheck "Connect to Data Services Cloud Console".

Check Contents

Ensure cloud console is disabled.
Type "group --info |grep -i "cloud enabled".

If the response is "cloud enabled: Yes", this is a finding.

Vulnerability Number

V-259800

Documentable

False

Rule Version

HPEN-NM-000222

Severity Override Guidance

Ensure cloud console is disabled.
Type "group --info |grep -i "cloud enabled".

If the response is "cloud enabled: Yes", this is a finding.

Check Content Reference

M

Target Key

5460