STIGQter STIGQter: STIG Summary:

VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide

Version: 2

Release: 2 Benchmark Date: 01 Jul 2026

CheckedNameTitle
SV-259071r960735_ruleThe vCenter Perfcharts service must limit the number of maximum concurrent connections permitted.
SV-259072r1137578_ruleThe vCenter Perfcharts service cookies must have secure flag set.
SV-259073r960888_ruleThe vCenter Perfcharts service must initiate session logging upon startup.
SV-259074r960891_ruleThe vCenter Perfcharts service must produce log records containing sufficient information regarding event details.
SV-259075r960930_ruleThe vCenter Perfcharts service logs folder permissions must be set correctly.
SV-259076r960960_ruleThe vCenter Perfcharts service must limit privileges for creating or modifying hosted application shared files.
SV-259077r960963_ruleThe vCenter Perfcharts service must disable stack tracing.
SV-259078r1043177_ruleThe vCenter Perfcharts service must be configured to use a specified IP address and port.
SV-259079r1043180_ruleThe vCenter Perfcharts service must be configured to limit data exposure between applications.
SV-259080r961122_ruleThe vCenter Perfcharts service must be configured to fail to a known safe state if system initialization fails.
SV-259081r961158_ruleThe vCenter Perfcharts service must set URIEncoding to UTF-8.
SV-259082r961167_ruleThe vCenter Perfcharts service "ErrorReportValve showServerInfo" must be set to "false".
SV-259083r1210410_ruleThe vCenter Perfcharts service must set an inactive timeout for sessions.
SV-259084r1210413_ruleThe vCenter Perfcharts service must off-load log records onto a different system or media from the system being logged.
SV-259085r961863_ruleThe vCenter Perfcharts service must enable "STRICT_SERVLET_COMPLIANCE".
SV-259086r960735_ruleThe vCenter Perfcharts service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive.
SV-259087r960735_ruleThe vCenter Perfcharts service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive.
SV-259088r1210415_ruleThe vCenter Perfcharts service must configure the "setCharacterEncodingFilter" filter.
SV-259089r1137578_ruleThe vCenter Perfcharts service cookies must have "http-only" flag set.
SV-259090r1137578_ruleThe vCenter Perfcharts service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands.
SV-259091r960963_ruleThe vCenter Perfcharts service shutdown port must be disabled.
SV-259092r960963_ruleThe vCenter Perfcharts service debug parameter must be disabled.
SV-259093r960963_ruleThe vCenter Perfcharts service directory listings parameter must be disabled.
SV-259094r960963_ruleThe vCenter Perfcharts service deployXML attribute must be disabled.
SV-259095r960963_ruleThe vCenter Perfcharts service must have Autodeploy disabled.
SV-259096r960963_ruleThe vCenter Perfcharts service xpoweredBy attribute must be disabled.
SV-259097r960963_ruleThe vCenter Perfcharts service example applications must be removed.
SV-259098r960963_ruleThe vCenter Perfcharts service default documentation must be removed.
SV-259099r961461_ruleThe vCenter Perfcharts service files must have permissions in an out-of-the-box state.
SV-259100r961863_ruleThe vCenter Perfcharts service must disable "ALLOW_BACKSLASH".
SV-259101r961863_ruleThe vCenter Perfcharts service must enable "ENFORCE_ENCODING_IN_GET_WRITER".
SV-259102r960963_ruleThe vCenter Perfcharts service manager webapp must be removed.
SV-259103r1003625_ruleThe vCenter Perfcharts service host-manager webapp must be removed.