STIGQter: STIG Summary: VMware NSX Manager Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 Jun 2016: The NSX vCenter must prohibit password reuse for a minimum of five generations.

DISA Rule

SV-83781r1_rule

Vulnerability Number

V-69177

Group Title

SRG-APP-000165-NDM-000253

Rule Version

VNSX-ND-000056

Severity

CAT II

CCI(s)

• CCI-000200 - The information system prohibits password reuse for the organization-defined number of generations.

Weight

10

Fix Recommendation

From the vSphere Web Client, go to Administration >> Single Sign-On >> Configuration >> Policies >> Password Policy.

Click "Edit" and enter "5" into the "Restrict reuse" setting. Click "OK".

Check Contents

From the vSphere Web Client, go to Administration >> Single Sign-On >> Configuration >> Policies >> Password Policy.

View the value of the "Restrict reuse" setting.

If the "Restrict reuse" policy is not set to "5" or more, this is a finding.

Vulnerability Number

V-69177

Documentable

False

Rule Version

VNSX-ND-000056

Severity Override Guidance

From the vSphere Web Client, go to Administration >> Single Sign-On >> Configuration >> Policies >> Password Policy.

View the value of the "Restrict reuse" setting.

If the "Restrict reuse" policy is not set to "5" or more, this is a finding.

Check Content Reference

M

Target Key

2991

Comments