Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000095-VMM-000480

    <GroupDescription></GroupDescription>
    Group
  • The ESXi host must disable ESXi Shell unless needed for diagnostics or troubleshooting.

    &lt;VulnDiscussion&gt;The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or ...
    Rule Medium Severity
  • SRG-OS-000104-VMM-000500

    <GroupDescription></GroupDescription>
    Group
  • The ESXi host must use Active Directory for local user authentication.

    &lt;VulnDiscussion&gt;Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Usin...
    Rule Low Severity
  • SRG-OS-000104-VMM-000500

    <GroupDescription></GroupDescription>
    Group
  • ESXi hosts using Host Profiles and/or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.

    &lt;VulnDiscussion&gt;If a host is configured to join an Active Directory domain using Host Profiles and/or Auto Deploy, the Active Directory crede...
    Rule Medium Severity
  • SRG-OS-000104-VMM-000500

    <GroupDescription></GroupDescription>
    Group
  • Active Directory ESX Admin group membership must not be used when adding ESXi hosts to Active Directory.

    &lt;VulnDiscussion&gt;When adding ESXi hosts to Active Directory, all user/group accounts assigned to the Active Directory group \"ESX Admins\" wil...
    Rule Medium Severity
  • SRG-OS-000163-VMM-000700

    <GroupDescription></GroupDescription>
    Group
  • The ESXi host must set a timeout to automatically disable idle shell sessions after two minutes.

    &lt;VulnDiscussion&gt;If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely a...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules