STIGQter: STIG Summary: VMware NSX 4.x Manager NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 30 Jan 2025:

The NSX Manager must be configured to conduct backups on an organizationally defined schedule.

DISA Rule

SV-265350r994273_rule

Vulnerability Number

V-265350

Group Title

SRG-APP-000516-NDM-000341

Rule Version

NMGR-4X-000093

Severity

CAT II

CCI(s)

CCI-000539 - Conduct backups of system documentation, including security-related documentation, per an organization-defined frequency that is consistent with recovery time and recovery point objectives.
CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

To configure a backup destination, do the following:

From the NSX Manager web interface, go to System >> Lifecycle Management >> Backup and Restore, and then click "Edit" next to SFTP Server.

Enter the target SFTP server, Directory Path, Username, Password, SSH Fingerprint, and Passphrase, and then click "Save".

To configure a backup schedule, do the following:

From the NSX Manager web interface, go to System >> Lifecycle Management >> Backup and Restore, and then click "Edit" next to Schedule.

Click the "Recurring Backup" toggle and configure an interval between backups.

Enable "Detect NSX configuration change" to trigger backups on detection of configuration changes and specify an interval for detecting changes. Click "Save".

Check Contents

From the NSX Manager web interface, go to System >> Lifecycle Management >> Backup and Restore to view the backup configuration.

If backup is not configured and scheduled on a recurring frequency, this is a finding.

The NSX Manager must be configured to conduct backups on an organizationally defined schedule.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key