Skip to content

VMware vSphere 7.0 vCenter Appliance UI Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000211-WSR-000030

    Group
  • The vSphere UI directory tree must have permissions in an out-of-the-box state.

    As a rule, accounts on a web server are to be kept to a minimum. Only administrators, web managers, developers, auditors, and web authors require accounts on the machine hosting the web server. The...
    Rule Medium Severity
  • SRG-APP-000223-WSR-000011

    Group
  • vSphere UI must restrict its cookie path.

    Cookies are used to exchange data between the web server and the client. Cookies, such as a session cookie, may contain session information and user credentials used to maintain a persistent connec...
    Rule Medium Severity
  • SRG-APP-000225-WSR-000140

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules