STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must monitor SSH access.

DISA Rule

SV-279531r1192591_rule

Vulnerability Number

V-279531

Group Title

SRG-OS-000032-GPOS-00013

Rule Version

NXAC-OS-000007

Severity

CAT II

CCI(s)

CCI-000067 - Employ automated mechanisms to monitor remote access methods.

Weight

Fix Recommendation

Configure SSH.

1. For AOS, configure SSH, then restart the SSH for the changes to take effect.

$ sudo salt-call state.sls security/CVM/sshdCVM
$ sudo systemctl restart sshd

2. For Prism Central, configure SSH, then restart the SSH for the changes to take effect.

$ sudo salt-call state.sls security/PCVM/sshdPCVM
$ sudo systemctl restart sshd

3. For Files, configure SSH, then restart the SSH for the changes to take effect.

$ sudo salt-call state.sls security/AFS/sshdAFS
$ sudo systemctl restart sshd

4. For AHV, configure SSH, then restart the SSH for the changes to take effect.

$ sudo salt-call state.sls security/KVM/sshdKVM
$ sudo systemctl restart sshd

Check Contents

Verify SSH access is monitored using the following command.

$ sudo grep -i loglevel /etc/ssh/sshd_config

If the LogLevel is not set to "VERBOSE", this is a finding.

Vulnerability Number

V-279531

Documentable

False

Rule Version

NXAC-OS-000007

Severity Override Guidance

Verify SSH access is monitored using the following command.

$ sudo grep -i loglevel /etc/ssh/sshd_config

If the LogLevel is not set to "VERBOSE", this is a finding.

Check Content Reference

Target Key

5730