VMware vSphere 8.0 vCenter Appliance Lookup Service Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000001-AS-000001
Group -
The vCenter Lookup service must limit the number of maximum concurrent connections permitted.
Resource exhaustion can occur when an unlimited number of concurrent requests are allowed on a website, facilitating a denial-of-service attack. Unless the number of requests is controlled, the web...Rule Medium Severity -
SRG-APP-000033-AS-000024
Group -
The vCenter Lookup service cookies must have secure flag set.
The secure flag is an option that can be set by the application server when sending a new cookie to the user within an HTTP Response. The purpose of the secure flag is to prevent cookies from being...Rule Medium Severity -
SRG-APP-000092-AS-000053
Group -
The vCenter Lookup service must initiate session logging upon startup.
Logging must be started as soon as possible when a service starts and as late as possible when a service is stopped. Many forms of suspicious actions can be detected by analyzing logs for unexpecte...Rule Medium Severity -
SRG-APP-000095-AS-000056
Group -
SRG-APP-000118-AS-000078
Group -
SRG-APP-000133-AS-000092
Group -
SRG-APP-000141-AS-000095
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules