Skip to content

VMware vSphere 7.0 vCenter Appliance EAM Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000141-WSR-000083

    Group
  • SRG-APP-000141-WSR-000085

    Group
  • ESX Agent Manager must not have the Web Distributed Authoring (WebDAV) servlet installed.

    WebDAV is an extension to the HTTP protocol that, when developed, was meant to allow users to create, change, and move documents on a server, typically a web server or web share. WebDAV is not wide...
    Rule Medium Severity
  • SRG-APP-000141-WSR-000086

    Group
  • SRG-APP-000141-WSR-000087

    Group
  • ESX Agent Manager must not have any symbolic links in the web content directory tree.

    A web server is designed to deliver content and execute scripts or applications at the request of a client or user. Containing user requests to files in the directory tree of the hosted web applica...
    Rule Medium Severity
  • SRG-APP-000211-WSR-000030

    Group
  • ESX Agent Manager directory tree must have permissions in an out-of-the-box state.

    As a rule, accounts on a web server are to be kept to a minimum. Only administrators, web managers, developers, auditors, and web authors require accounts on the machine hosting the web server. The...
    Rule Medium Severity
  • SRG-APP-000225-WSR-000140

    Group
  • ESX Agent Manager must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.

    Determining a safe state for failure and weighing that against a potential denial of service for users depends on what type of application the web server is hosting. For the ESX Agent Manager, it i...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules