STIGQter STIGQter: STIG Summary:

VMware vSphere 7.0 vCenter Appliance EAM Security Technical Implementation Guide

Version: 1

Release: 2 Benchmark Date: 26 Jul 2023

CheckedNameTitle
SV-256673r888575_ruleESX Agent Manager must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive.
SV-256674r888578_ruleESX Agent Manager must limit the number of concurrent connections permitted.
SV-256675r888581_ruleESX Agent Manager must limit the maximum size of a POST request.
SV-256676r888584_ruleESX Agent Manager must protect cookies from cross-site scripting (XSS).
SV-256677r888587_ruleESX Agent Manager must record user access in a format that enables monitoring of remote access.
SV-256678r888590_ruleESX Agent Manager must generate log records for system startup and shutdown.
SV-256679r888593_ruleESX Agent Manager log files must only be modifiable by privileged users.
SV-256680r918904_ruleESX Agent Manager application files must be verified for their integrity.
SV-256681r888599_ruleESX Agent Manager must only run one webapp.
SV-256682r888602_ruleESX Agent Manager must not be configured with unsupported realms.
SV-256683r888605_ruleESX Agent Manager must be configured to limit access to internal packages.
SV-256684r888608_ruleESX Agent Manager must have Multipurpose Internet Mail Extensions (MIMEs) that invoke operating system shell programs disabled.
SV-256685r888611_ruleESX Agent Manager must have mappings set for Java servlet pages.
SV-256686r888614_ruleESX Agent Manager must not have the Web Distributed Authoring (WebDAV) servlet installed.
SV-256687r888617_ruleESX Agent Manager must be configured with memory leak protection.
SV-256688r888620_ruleESX Agent Manager must not have any symbolic links in the web content directory tree.
SV-256689r888623_ruleESX Agent Manager directory tree must have permissions in an out-of-the-box state.
SV-256690r888626_ruleESX Agent Manager must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.
SV-256691r888629_ruleESX Agent Manager must limit the number of allowed connections.
SV-256692r888632_ruleESX Agent Manager must set URIEncoding to UTF-8.
SV-256693r888635_ruleESX Agent Manager must use the "setCharacterEncodingFilter" filter.
SV-256694r888638_ruleESX Agent Manager must set the welcome-file node to a default web page.
SV-256695r888641_ruleESX Agent Manager must not show directory listings.
SV-256696r888644_ruleESX Agent Manager must be configured to show error pages with minimal information.
SV-256697r888647_ruleESX Agent Manager must be configured to not show error reports.
SV-256698r918905_ruleESX Agent Manager must hide the server version.
SV-256699r888653_ruleESX Agent Manager must not enable support for TRACE requests.
SV-256700r918907_ruleESX Agent Manager must have the debug option disabled.
SV-256701r888659_ruleRsyslog must be configured to monitor and ship ESX Agent Manager log files.
SV-256702r888662_ruleESX Agent Manager must set the secure flag for cookies.
SV-256703r888665_ruleESX Agent Manager must be configured with the appropriate ports.
SV-256704r888668_ruleESX Agent Manager must disable the shutdown port.
SV-256705r888671_ruleESX Agent Manager default servlet must be set to "readonly".