STIGQter STIGQter: STIG Summary: VMware NSX Manager Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 Jun 2016: The NSX Manager must support organizational requirements to conduct backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.

DISA Rule

SV-83817r1_rule

Vulnerability Number

V-69213

Group Title

SRG-APP-000516-NDM-000340

Rule Version

VNSX-ND-000138

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Change NSX Manager backup configurations to send backups to a centralized location and when changes occur or weekly, whichever is sooner.

Log on to NSX Manager with credentials authorized for administration, navigate and select "Backup and Restore".

To specify the backup location, click "Change" next to FTP Server Settings.

Type the IP address or host name of the backup system.

From the Transfer Protocol drop-down menu, select either "SFTP" or "FTP", based on what the destination supports.

Edit the default port if required.

Type the username and password required to log on to the backup system.

In the Backup Directory field, type the absolute path where backups will be stored.

Type a text string in Filename Prefix. (This text is prepended to each backup filename for easy recognition on the backup system. For example, if you type "ppdb", the resulting backup is named as ppdbHH_MM_SS_DayDDMonYYYY.)

Type the passphrase to secure the backup. (You will need this passphrase to restore the backup.)

Click "OK".

For an on-demand backup, click "Backup".

For scheduled backups, click "Change" next to "Scheduling" (frequency must be when changes occur or weekly, whichever is sooner).

From the "Backup Frequency" drop-down menu, select "Hourly", "Daily", or "Weekly". The Day of Week, Hour of Day, and Minute drop-down menus are disabled based on the selected frequency. For example, if you select Daily, the Day of Week drop-down menu is disabled as this field is not applicable to a daily frequency.

For a weekly backup, select the day of the week the data must be backed up.

For a weekly or daily backup, select the hour at which the backup must begin.

Select the minute to begin and click "Schedule". (Do not exclude logs and flow data from being backed up.)

Click "OK".

Check Contents

Verify NSX Manager backups are being sent to a centralized location and when changes occur or weekly, whichever is sooner.

Log on to NSX Manager with credentials authorized for administration, navigate and select Backup and Restore >> Backup History.

Confirm there are current backups and information is being backed up at a consistent interval.

If backups are not being sent to a centralized location when changes occur or weekly, whichever is sooner, this is a finding.

Vulnerability Number

V-69213

Documentable

False

Rule Version

VNSX-ND-000138

Severity Override Guidance

Verify NSX Manager backups are being sent to a centralized location and when changes occur or weekly, whichever is sooner.

Log on to NSX Manager with credentials authorized for administration, navigate and select Backup and Restore >> Backup History.

Confirm there are current backups and information is being backed up at a consistent interval.

If backups are not being sent to a centralized location when changes occur or weekly, whichever is sooner, this is a finding.

Check Content Reference

M

Target Key

2991

Comments