STIGQter STIGQter: STIG Summary:

VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide

Version: 1

Release: 1 Benchmark Date: 31 Oct 2023

CheckedNameTitle
SV-259071r934871_ruleThe vCenter Perfcharts service must limit the number of maximum concurrent connections permitted.
SV-259072r934874_ruleThe vCenter Perfcharts service cookies must have secure flag set.
SV-259073r934877_ruleThe vCenter Perfcharts service must initiate session logging upon startup.
SV-259074r935472_ruleThe vCenter Perfcharts service must produce log records containing sufficient information regarding event details.
SV-259075r934883_ruleThe vCenter Perfcharts service logs folder permissions must be set correctly.
SV-259076r934886_ruleThe vCenter Perfcharts service must limit privileges for creating or modifying hosted application shared files.
SV-259077r934889_ruleThe vCenter Perfcharts service must disable stack tracing.
SV-259078r934892_ruleThe vCenter Perfcharts service must be configured to use a specified IP address and port.
SV-259079r934895_ruleThe vCenter Perfcharts service must be configured to limit data exposure between applications.
SV-259080r934898_ruleThe vCenter Perfcharts service must be configured to fail to a known safe state if system initialization fails.
SV-259081r934901_ruleThe vCenter Perfcharts service must set URIEncoding to UTF-8.
SV-259082r934904_ruleThe vCenter Perfcharts service "ErrorReportValve showServerInfo" must be set to "false".
SV-259083r934907_ruleThe vCenter Perfcharts service must set an inactive timeout for sessions.
SV-259084r934910_ruleThe vCenter Perfcharts service must offload log records onto a different system or media from the system being logged.
SV-259085r934913_ruleThe vCenter Perfcharts service must enable "STRICT_SERVLET_COMPLIANCE".
SV-259086r934916_ruleThe vCenter Perfcharts service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive.
SV-259087r934919_ruleThe vCenter Perfcharts service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive.
SV-259088r934922_ruleThe vCenter Perfcharts service must configure the "setCharacterEncodingFilter" filter.
SV-259089r934925_ruleThe vCenter Perfcharts service cookies must have "http-only" flag set.
SV-259090r934928_ruleThe vCenter Perfcharts service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands.
SV-259091r934931_ruleThe vCenter Perfcharts service shutdown port must be disabled.
SV-259092r934934_ruleThe vCenter Perfcharts service debug parameter must be disabled.
SV-259093r934937_ruleThe vCenter Perfcharts service directory listings parameter must be disabled.
SV-259094r934940_ruleThe vCenter Perfcharts service deployXML attribute must be disabled.
SV-259095r934943_ruleThe vCenter Perfcharts service must have Autodeploy disabled.
SV-259096r934946_ruleThe vCenter Perfcharts service xpoweredBy attribute must be disabled.
SV-259097r934949_ruleThe vCenter Perfcharts service example applications must be removed.
SV-259098r934952_ruleThe vCenter Perfcharts service default documentation must be removed.
SV-259099r934955_ruleThe vCenter Perfcharts service files must have permissions in an out-of-the-box state.
SV-259100r934958_ruleThe vCenter Perfcharts service must disable "ALLOW_BACKSLASH".
SV-259101r934961_ruleThe vCenter Perfcharts service must enable "ENFORCE_ENCODING_IN_GET_WRITER".
SV-259102r934964_ruleThe vCenter Perfcharts service manager webapp must be removed.
SV-259103r934967_ruleThe vCenter Perfcharts service host-manager webapp must be removed.