Skip to content

The vCenter VAMI service must generate information to monitor remote access.

An XCCDF Rule

Description

Remote access can be exploited by an attacker to compromise the server. By recording all remote access activities, it will be possible to determine the attacker's location, intent, and degree of success. VAMI uses the "mod_accesslog" module to log information relating to remote requests. These logs can then be piped to external monitoring systems.

ID
SV-259139r1003691_rule
Version
VCLD-80-000005
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Navigate to and open:

/opt/vmware/etc/lighttpd/applmgmt-lighttpd.conf

Add the following value in the "server.modules" section: