Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000175-AS-000124

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must perform RFC 5280-compliant certification path validation.

    &lt;VulnDiscussion&gt;A certificate's certification path is the path from the end entity certificate to a trusted root certification authority (CA)...
    Rule High Severity
  • SRG-APP-000514-AS-000137

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must use DoD- or CNSS-approved PKI Class 3 or Class 4 certificates.

    &lt;VulnDiscussion&gt;Class 3 PKI certificates are used for servers and software signing rather than for identifying individuals. Class 4 certifica...
    Rule High Severity
  • SRG-APP-000231-AS-000133

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must protect the confidentiality and integrity of all information at rest.

    &lt;VulnDiscussion&gt;When data is written to digital media such as hard drives, mobile computers, external/removable hard drives, personal digital...
    Rule High Severity
  • SRG-APP-000267-AS-000170

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must restrict error messages only to authorized users.

    &lt;VulnDiscussion&gt;If the application provides too much information in error logs and administrative messages to the screen, this could lead to ...
    Rule Medium Severity
  • SRG-APP-000211-AS-000146

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must separate hosted application functionality from application server management functionality.

    &lt;VulnDiscussion&gt;The application server consists of the management interface and hosted applications. By separating the management interface f...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules