VMware vSphere 7.0 vCenter Appliance Perfcharts Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000001-WSR-000001
Group -
Performance Charts must limit the amount of time that each Transport Control Protocol (TCP) connection is kept alive.
Denial of service (DoS) is one threat against web servers. Many DoS attacks attempt to consume web server resources in such a way that no more resources are available to satisfy legitimate requests...Rule Medium Severity -
SRG-APP-000001-WSR-000001
Group -
SRG-APP-000001-WSR-000001
Group -
SRG-APP-000001-WSR-000002
Group -
SRG-APP-000016-WSR-000005
Group -
Performance Charts must record user access in a format that enables monitoring of remote access.
Remote access can be exploited by an attacker to compromise the server. By recording all remote access activities, it will be possible to determine the attacker's location, intent, and degree of su...Rule Medium Severity -
SRG-APP-000089-WSR-000047
Group -
Performance Charts must generate log records for system startup and shutdown.
Logging must be started as soon as possible when a service starts and when a service is stopped. Many forms of suspicious actions can be detected by analyzing logs for unexpected service starts and...Rule Medium Severity -
SRG-APP-000118-WSR-000068
Group -
SRG-APP-000131-WSR-000051
Group -
SRG-APP-000131-WSR-000073
Group -
Performance Charts must only run one webapp.
VMware ships Performance Charts on the vCenter Server Appliance (VCSA)with one webapp. Any other path is potentially malicious and must be removed.Rule Medium Severity -
SRG-APP-000141-WSR-000015
Group -
Performance Charts must not be configured with unsupported realms.
Performance Charts performs user authentication at the application level and not through Tomcat. Depending on the vCenter Server Appliance (VCSA) version, Performance Charts may come configured wit...Rule Medium Severity -
SRG-APP-000141-WSR-000075
Group -
Performance Charts must be configured to limit access to internal packages.
The "package.access" entry in the "catalina.properties" file implements access control at the package level. When properly configured, a Security Exception will be reported if an errant or maliciou...Rule Medium Severity -
SRG-APP-000141-WSR-000081
Group -
Performance Charts must have Multipurpose Internet Mail Extensions (MIMEs) that invoke operating system shell programs disabled.
MIME mappings tell Performance Charts what type of program various file types and extensions are and what external utilities or programs are needed to execute the file type. By ensuring various she...Rule Medium Severity -
SRG-APP-000141-WSR-000083
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.