An error occurred:

VMware NSX-T Tier 1 Gateway Firewall STIG

VMware NSX-T Tier 1 Gateway Firewall Security Technical Implementation Guide

ID Vuln ID Title Cat Status
T1FW-3X-000005 V-251761 The NSX-T Tier-1 Gateway Firewall must generate traffic log entries containing information to establish what type of events occurred. Cat II
T1FW-3X-000006 V-251762 The NSX-T Tier-1 Gateway Firewall must generate traffic log entries containing information to establish the details of the event. Cat III
T1FW-3X-000011 V-251763 Each NSX-T Edge Node configured to host a Tier-1 Gateway Firewall must be configured to use the TLS or LI-TLS protocols to configure and secure traffic log records. Cat II
T1FW-3X-000019 V-251764 The NSX-T Tier-1 Gateway Firewall must block outbound traffic containing denial-of-service (DoS) attacks to protect against the use of internal information systems to launch any DoS attacks against other networks or endpoints. Cat II
T1FW-3X-000021 V-251765 The NSX-T Tier-1 Gateway Firewall must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception). Cat II
T1FW-3X-000026 V-251766 The NSX-T Tier-1 Gateway Firewall must be configured to send traffic log entries to a central audit server for management and configuration of the traffic log entries. Cat II
T1FW-3X-000028 V-251767 The NSX-T Tier-1 Gateway Firewall must employ filters that prevent or limit the effects of all types of commonly known denial-of-service (DoS) attacks, including flooding, packet sweeps, and unauthorized port scanning. Cat II
T1FW-3X-000030 V-251768 The NSX-T Tier-1 Gateway Firewall must apply ingress filters to traffic that is inbound to the network through any active external interface. Cat II
T1FW-3X-000036 V-251769 The NSX-T Tier-1 Gateway Firewall must configure SpoofGuard to block outbound IP packets that contain illegitimate packet attributes. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.