VMware Horizon 7.13 Connection Server Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000427-AS-000264
<GroupDescription></GroupDescription>Group -
The Horizon Connection Server must require CAC reauthentication after user idle timeouts.
<VulnDiscussion>If a user VDI session times out due to activity, the user must be assumed to not be active and have their resource locked. Th...Rule Medium Severity -
The Horizon Connection Server must be configured with a DoD-issued TLS certificate.
<VulnDiscussion>The DoD will only accept PKI certificates obtained from a DoD-approved internal or external certificate authority (CA). If th...Rule Medium Severity -
SRG-APP-000516-AS-000237
<GroupDescription></GroupDescription>Group -
The Horizon Connection Server must reauthenticate users after a network interruption.
<VulnDiscussion>Given the remote access nature of Horizon Connection Server, the client must be ensured to be under positive control as much ...Rule Medium Severity -
SRG-APP-000516-AS-000237
<GroupDescription></GroupDescription>Group -
The Horizon Connection Server must disconnect users after a maximum of ten hours.
<VulnDiscussion>Horizon Connection Server is intended to provide remote desktops and applications, generally during working hours and for no ...Rule Medium Severity -
SRG-APP-000516-AS-000237
<GroupDescription></GroupDescription>Group -
The Horizon Connection Server must disconnect applications after two hours of idle time.
<VulnDiscussion>Horizon View is intended to provide remote desktops and applications during for more or less continuous use. If an applicatio...Rule Medium Severity -
SRG-APP-000516-AS-000237
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.