I - Mission Critical Public
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000380-AS-000088
Group -
Nutanix AOS must enforce access restrictions associated with changes to application server configuration.
When dealing with access restrictions pertaining to change control, it should be noted that any changes to the software, and/or application server configuration can potentially have significant eff...Rule Medium Severity -
SRG-APP-000148-AS-000101
Group -
Nutanix AOS must use an enterprise user management system to uniquely identify and authenticate users.
To ensure accountability and prevent unauthorized access, application server users must be uniquely identified and authenticated. This is typically accomplished via the use of a user store which is...Rule Medium Severity -
SRG-APP-000149-AS-000102
Group -
Nutanix AOS must use multifactor authentication for account access.
Multifactor authentication creates a layered defense and makes it more difficult for an unauthorized person to access the application server. If one factor is compromised or broken, the attacker st...Rule Medium Severity -
SRG-APP-000391-AS-000239
Group -
Nutanix AOS must accept Personal Identity Verification (PIV) credentials to access the management interface.
The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access. PIV credentials are only used in an unclassified environment. DoD has mandated the use of the C...Rule Medium Severity -
SRG-APP-000172-AS-000121
Group -
Nutanix AOS must utilize encryption when using LDAP for authentication.
Passwords need to be protected at all times, and encryption is the standard method for protecting passwords during transmission. Application servers have the capability to utilize LDAP directorie...Rule High Severity -
SRG-APP-000175-AS-000124
Group -
Nutanix AOS must perform RFC 5280-compliant certification path validation.
A certificate's certification path is the path from the end entity certificate to a trusted root certification authority (CA). Certification path validation is necessary for a relying party to make...Rule High Severity -
SRG-APP-000514-AS-000137
Group -
Nutanix AOS must use DoD- or CNSS-approved PKI Class 3 or Class 4 certificates.
Class 3 PKI certificates are used for servers and software signing rather than for identifying individuals. Class 4 certificates are used for business-to-business transactions. Utilizing unapproved...Rule High Severity -
SRG-APP-000231-AS-000133
Group -
Nutanix AOS must protect the confidentiality and integrity of all information at rest.
When data is written to digital media such as hard drives, mobile computers, external/removable hard drives, personal digital assistants, flash/thumb drives, etc., there is risk of data loss and da...Rule High Severity -
SRG-APP-000267-AS-000170
Group -
Nutanix AOS must restrict error messages only to authorized users.
If the application provides too much information in error logs and administrative messages to the screen, this could lead to compromise. The structure and content of error messages need to be caref...Rule Medium Severity -
SRG-APP-000211-AS-000146
Group -
Nutanix AOS must separate hosted application functionality from application server management functionality.
The application server consists of the management interface and hosted applications. By separating the management interface from hosted applications, the user must authenticate as a privileged user...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.