Check: GEN003608
VMware ESX 3 Server:
GEN003608
(in version v1 r2)
Title
Proxy ARP must not be enabled on the system. (Cat II impact)
Discussion
Proxy ARP allows a system to respond to ARP requests on one interface on behalf of hosts connected to another interface. If this function is enabled when not required, addressing information may be leaked between the attached network segments.
Check Content
Determine if the system has proxy ARP enabled. If so, this is a finding.
Fix Text
Disable proxy ARP on the system.
Additional Identifiers
Rule ID: SV-26079r1_rule
Vulnerability ID: V-22415
Group Title: GEN003608
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001551 |
The organization defines approved authorizations for controlling the flow of information between interconnected systems. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AC-4 |
Information Flow Enforcement |