Check: GEN005307
VMware ESX 3 Server:
GEN005307
(in version v1 r2)
Title
The SNMP service must require the use of a FIPS 140-2 approved encryption algorithm for protecting the privacy of SNMP messages. (Cat II impact)
Discussion
The SNMP service must use AES or a FIPS 140-2 approved successor algorithm for protecting the privacy of communications.
Check Content
Determine if the SNMP service uses a FIPS 140-2 approved encryption algorithm for protecting the privacy of SNMP messages. If it does not, this is a finding.
Fix Text
Configure the SNMP service to use a FIPS 140-2 approved encryption algorithm for protecting the privacy of SNMP messages.
Additional Identifiers
Rule ID: SV-26118r1_rule
Vulnerability ID: V-22449
Group Title: GEN005307
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000068 |
The information system implements cryptographic mechanisms to protect the confidentiality of remote access sessions. |
Controls
Number | Title |
---|---|
AC-17 (2) |
Protection Of Confidentiality / Integrity Using Encryption |