Skip to content

VMware NSX-T Tier-0 Gateway RTR Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-NET-000362-RTR-000117

    Group
  • SRG-NET-000512-RTR-000001

    Group
  • The NSX-T Tier-0 Gateway must be configured to use its loopback address as the source address for iBGP peering sessions.

    Using a loopback address as the source address offers a multitude of uses for security, access, management, and scalability of the BGP routers. It is easier to construct appropriate ingress filters...
    Rule Low Severity
  • SRG-NET-000131-RTR-000035

    Group
  • The NSX-T Tier-0 Gateway must be configured to have routing protocols disabled if not in use.

    A compromised router introduces risk to the entire network infrastructure, as well as data resources that are accessible via the network. The perimeter defense has no oversight or control of attack...
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules