I - Mission Critical Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000380-AS-000088
<GroupDescription></GroupDescription>Group -
Nutanix AOS must enforce access restrictions associated with changes to application server configuration.
<VulnDiscussion>When dealing with access restrictions pertaining to change control, it should be noted that any changes to the software, and/...Rule Medium Severity -
SRG-APP-000148-AS-000101
<GroupDescription></GroupDescription>Group -
Nutanix AOS must use an enterprise user management system to uniquely identify and authenticate users.
<VulnDiscussion>To ensure accountability and prevent unauthorized access, application server users must be uniquely identified and authentica...Rule Medium Severity -
SRG-APP-000149-AS-000102
<GroupDescription></GroupDescription>Group -
Nutanix AOS must use multifactor authentication for account access.
<VulnDiscussion>Multifactor authentication creates a layered defense and makes it more difficult for an unauthorized person to access the app...Rule Medium Severity -
SRG-APP-000391-AS-000239
<GroupDescription></GroupDescription>Group -
Nutanix AOS must accept Personal Identity Verification (PIV) credentials to access the management interface.
<VulnDiscussion>The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access. PIV credentials are only...Rule Medium Severity -
SRG-APP-000172-AS-000121
<GroupDescription></GroupDescription>Group -
Nutanix AOS must utilize encryption when using LDAP for authentication.
<VulnDiscussion>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords during transmissi...Rule High Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.