STIGQter STIGQter: STIG Summary: VMware NSX 4.x Manager NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 30 Jan 2025:

The NSX Manager must disable SSH.

DISA Rule

SV-265353r994282_rule

Vulnerability Number

V-265353

Group Title

SRG-APP-000516-NDM-000317

Rule Version

NMGR-4X-000097

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

From an NSX Manager shell, run the following command(s):

> stop service ssh
> clear service ssh start-on-boot

Check Contents

From an NSX Manager shell, run the following command:

> get service ssh

Expected results:
Service name: ssh
Service state: stopped
Start on boot: False

If the SSH server is not stopped or starts on boot, this is a finding.

Vulnerability Number

V-265353

Documentable

False

Rule Version

NMGR-4X-000097

Severity Override Guidance

From an NSX Manager shell, run the following command:

> get service ssh

Expected results:
Service name: ssh
Service state: stopped
Start on boot: False

If the SSH server is not stopped or starts on boot, this is a finding.

Check Content Reference

M

Target Key

5633