STIGQter STIGQter: STIG Summary: VMware NSX 4.x Manager NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 30 Jan 2025:

The NSX Manager must retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.

DISA Rule

SV-265295r994108_rule

Vulnerability Number

V-265295

Group Title

SRG-APP-000069-NDM-000216

Rule Version

NMGR-4X-000014

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

From the NSX Manager web interface, go to System >> Settings >> General Settings >> User Interface.

Under Login Consent Settings, click "Edit".

Toggle "Login Consent" to On.

Toggle "Require Explicit User Consent" to Yes.

Note: The banner text is also entered; however, that is covered by NMGR-4X-000013.

Check Contents

From the NSX Manager web interface, go to System >> Settings >> General Settings >> User Interface.

Review the Login Consent Settings.

Verify "Login Consent" is not On.
Verify "Require Explicit User Consent" is set to Yes.

If the Standard Mandatory DOD Notice and Consent Banner is not retained on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access, this is a finding.

Vulnerability Number

V-265295

Documentable

False

Rule Version

NMGR-4X-000014

Severity Override Guidance

From the NSX Manager web interface, go to System >> Settings >> General Settings >> User Interface.

Review the Login Consent Settings.

Verify "Login Consent" is not On.
Verify "Require Explicit User Consent" is set to Yes.

If the Standard Mandatory DOD Notice and Consent Banner is not retained on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access, this is a finding.

Check Content Reference

M

Target Key

5633