III - Administrative Classified
Rules and Groups employed by this XCCDF Profile
-
Remote logging for ESXi hosts must be configured.
<VulnDiscussion>Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a c...Rule Medium Severity -
SRG-OS-000021-VMM-000050
<GroupDescription></GroupDescription>Group -
The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.
<VulnDiscussion>By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known ...Rule Medium Severity -
SRG-OS-000329-VMM-001180
<GroupDescription></GroupDescription>Group -
The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.
<VulnDiscussion>By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user passw...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules