STIGQter STIGQter: STIG Summary:

VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide

Version: 1

Release: 1 Benchmark Date: 31 Oct 2023

CheckedNameTitle
☐SV-259003r934667_ruleThe vCenter ESX Agent Manager service must limit the number of maximum concurrent connections permitted.
☐SV-259004r934670_ruleThe vCenter ESX Agent Manager service cookies must have secure flag set.
☐SV-259005r934673_ruleThe vCenter ESX Agent Manager service must initiate session logging upon startup.
☐SV-259006r934676_ruleThe vCenter ESX Agent Manager service must produce log records containing sufficient information regarding event details.
☐SV-259007r934679_ruleThe vCenter ESX Agent Manager service logs folder permissions must be set correctly.
☐SV-259008r934682_ruleThe vCenter ESX Agent Manager service must limit privileges for creating or modifying hosted application shared files.
☐SV-259009r934685_ruleThe vCenter ESX Agent Manager service must disable stack tracing.
☐SV-259010r934688_ruleThe vCenter ESX Agent Manager service must be configured to use a specified IP address and port.
☐SV-259011r934691_ruleThe vCenter ESX Agent Manager service must be configured to limit data exposure between applications.
☐SV-259012r934694_ruleThe vCenter ESX Agent Manager service must be configured to fail to a known safe state if system initialization fails.
☐SV-259013r934697_ruleThe vCenter ESX Agent Manager service must set URIEncoding to UTF-8.
☐SV-259014r934700_ruleThe vCenter ESX Agent Manager service "ErrorReportValve showServerInfo" must be set to "false".
☐SV-259015r934703_ruleThe vCenter ESX Agent Manager service must set an inactive timeout for sessions.
☐SV-259016r934706_ruleThe vCenter ESX Agent Manager service must offload log records onto a different system or media from the system being logged.
☐SV-259017r934709_ruleThe vCenter ESX Agent Manager service must enable STRICT_SERVLET_COMPLIANCE.
☐SV-259018r934712_ruleThe vCenter ESX Agent Manager service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive.
☐SV-259019r934715_ruleThe vCenter ESX Agent Manager service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive.
☐SV-259020r934718_ruleThe vCenter ESX Agent Manager service must configure the "setCharacterEncodingFilter" filter.
☐SV-259021r934721_ruleThe vCenter ESX Agent Manager service cookies must have the "http-only" flag set.
☐SV-259022r934724_ruleThe vCenter ESX Agent Manager service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands.
☐SV-259023r934727_ruleThe vCenter ESX Agent Manager service shutdown port must be disabled.
☐SV-259024r934730_ruleThe vCenter ESX Agent Manager service debug parameter must be disabled.
☐SV-259025r934733_ruleThe vCenter ESX Agent Manager service directory listings parameter must be disabled.
☐SV-259026r934736_ruleThe vCenter ESX Agent Manager service deployXML attribute must be disabled.
☐SV-259027r934739_ruleThe vCenter ESX Agent Manager service must have Autodeploy disabled.
☐SV-259028r934742_ruleThe vCenter ESX Agent Manager service xpoweredBy attribute must be disabled.
☐SV-259029r934745_ruleThe vCenter ESX Agent Manager service example applications must be removed.
☐SV-259030r934748_ruleThe vCenter ESX Agent Manager service default ROOT web application must be removed.
☐SV-259031r934751_ruleThe vCenter ESX Agent Manager service default documentation must be removed.
☐SV-259032r934754_ruleThe vCenter ESX Agent Manager service files must have permissions in an out-of-the-box state.
☐SV-259033r934757_ruleThe vCenter ESX Agent Manager service must disable "ALLOW_BACKSLASH".
☐SV-259034r934760_ruleThe vCenter ESX Agent Manager service must enable "ENFORCE_ENCODING_IN_GET_WRITER".
☐SV-259035r934763_ruleThe vCenter ESX Agent Manager service manager webapp must be removed.
☐SV-259036r934766_ruleThe vCenter ESX Agent Manager service host-manager webapp must be removed.