Skip to content

VMware vSphere 8.0 vCenter Appliance Lookup Service Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000001-AS-000001

    Group
  • The vCenter Lookup service must limit the number of maximum concurrent connections permitted.

    Resource exhaustion can occur when an unlimited number of concurrent requests are allowed on a website, facilitating a denial-of-service attack. Unless the number of requests is controlled, the web...
    Rule Medium Severity
  • SRG-APP-000033-AS-000024

    Group
  • The vCenter Lookup service cookies must have secure flag set.

    The secure flag is an option that can be set by the application server when sending a new cookie to the user within an HTTP Response. The purpose of the secure flag is to prevent cookies from being...
    Rule Medium Severity
  • SRG-APP-000092-AS-000053

    Group
  • The vCenter Lookup service must initiate session logging upon startup.

    Logging must be started as soon as possible when a service starts and as late as possible when a service is stopped. Many forms of suspicious actions can be detected by analyzing logs for unexpecte...
    Rule Medium Severity
  • SRG-APP-000095-AS-000056

    Group
  • SRG-APP-000118-AS-000078

    Group
  • SRG-APP-000133-AS-000092

    Group
  • SRG-APP-000141-AS-000095

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules