STIGQter STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must be configured to protect nonlocal maintenance sessions by separating the maintenance session from other network sessions with the system by logically separated communications paths.

DISA Rule

SV-283437r1195005_rule

Vulnerability Number

V-283437

Group Title

SRG-APP-000880-NDM-000290

Rule Version

ASMP-ND-001310

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Disable all unencrypted ports:

cli% setnet disableports yes

Check Contents

Using the nmap tool, verify only secure ports are open. 

From a command shell on a Linux workstation in the operational environment, enter the following command:

$ sudo nmap -sT -sU -sV --version-all -vv -p 1-65535 <ip address of storage system>

If any Port is listed other than SSHD(22), NTP(123), SNMP(161,162), 3par-mgmt-ssl (5783), CIM (5989/configurable), or WSAPI (8088/configurable), this is a finding.

Vulnerability Number

V-283437

Documentable

False

Rule Version

ASMP-ND-001310

Severity Override Guidance

Using the nmap tool, verify only secure ports are open. 

From a command shell on a Linux workstation in the operational environment, enter the following command:

$ sudo nmap -sT -sU -sV --version-all -vv -p 1-65535 <ip address of storage system>

If any Port is listed other than SSHD(22), NTP(123), SNMP(161,162), 3par-mgmt-ssl (5783), CIM (5989/configurable), or WSAPI (8088/configurable), this is a finding.

Check Content Reference

M

Target Key

5742