An error occurred:

VMware vRealize Automation 7.x SLES STIG

VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

ID Vuln ID Title Cat Status
VRAU-SL-000010 V-240344 The SLES for vRealize must automatically remove or disable temporary user accounts after 72 hours. Cat II
VRAU-SL-000015 V-240345 The SLES for vRealize must audit all account creations. Cat II
VRAU-SL-000020 V-240346 In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications must be investigated for legitimacy. Cat II
VRAU-SL-000025 V-240347 The SLES for vRealize must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period. Cat II
VRAU-SL-000030 V-240348 The SLES for vRealize must display the Standard Mandatory DoD Notice and Consent Banner before granting access via SSH. Cat II
VRAU-SL-000040 V-240349 The SLES for vRealize must limit the number of concurrent sessions to 10 for all accounts and/or account types. Cat III
VRAU-SL-000050 V-240350 The SLES for vRealize must initiate a session lock after a 15-minute period of inactivity for all connection types. Cat II
VRAU-SL-000055 V-240351 The SLES for vRealize must initiate a session lock after a 15-minute period of inactivity for an SSH connection. Cat II
VRAU-SL-000070 V-240352 The SLES for vRealize must monitor remote access methods - SSH Daemon. Cat II
VRAU-SL-000075 V-240353 The SLES for vRealize must implement DoD-approved encryption to protect the confidentiality of remote access sessions- SSH Daemon. Cat II
VRAU-SL-000080 V-240354 The SLES for vRealize must implement DoD-approved encryption to protect the confidentiality of remote access sessions - SSH Client. Cat II
VRAU-SL-000085 V-240355 The SLES for vRealize must produce audit records. Cat II
VRAU-SL-000125 V-240356 The SLES for vRealize must alert the ISSO and SA (at a minimum) in the event of an audit processing failure. Cat II
VRAU-SL-000130 V-240357 The SLES for vRealize must shut down by default upon audit failure (unless availability is an overriding concern). Cat II
VRAU-SL-000150 V-240358 The SLES for vRealize must protect audit information from unauthorized read access - ownership. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.