Navigate

VMware vSphere 6.7 Virgo-Client STIG

VMware vSphere 6.7 Virgo-Client Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
VCFL-67-000001	V-239743	vSphere Client must limit the amount of time that each TCP connection is kept alive.	Cat II
VCFL-67-000002	V-239744	vSphere Client must limit the number of concurrent connections permitted.	Cat II
VCFL-67-000003	V-239745	vSphere Client must limit the maximum size of a POST request.	Cat II
VCFL-67-000004	V-239746	vSphere Client must protect cookies from XSS.	Cat II
VCFL-67-000005	V-239747	vSphere Client must be configured with FIPS 140-2 compliant ciphers for HTTPS connections.	Cat I
VCFL-67-000006	V-239748	vSphere Client must be configured to enable SSL/TLS.	Cat I
VCFL-67-000007	V-239749	vSphere Client must be configured to only communicate over TLS 1.2.	Cat I
VCFL-67-000008	V-239750	vSphere Client must be configured to use the HTTPS scheme.	Cat II
VCFL-67-000009	V-239751	vSphere Client must record user access in a format that enables monitoring of remote access.	Cat II
VCFL-67-000010	V-239752	vSphere Client must generate log records during Java startup and shutdown.	Cat II
VCFL-67-000012	V-239753	vSphere Client application files must be verified for their integrity.	Cat II
VCFL-67-000013	V-239754	vSphere Client must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled.	Cat II
VCFL-67-000014	V-239755	vSphere Client must have mappings set for Java servlet pages.	Cat II
VCFL-67-000015	V-239756	vSphere Client must not have the Web Distributed Authoring (WebDAV) servlet installed.	Cat II
VCFL-67-000016	V-239757	vSphere Client must be configured with memory leak protection.	Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.