Detections
Analytics

1.76 ESXI-80-000250

Information

The ESXi host must disable virtual hardware management network interfaces.

GROUP ID: V-265977
RULE ID: SV-265977r1003587

Hardware management controllers often present virtual or USB NICs to the ESXi host. These can be used as backdoors and should be deactivated both in the hardware configuration and in ESXi.

Solution

From the vSphere Client, go to Hosts and Clusters.

Select the ESXi Host >> Configure >> System >> Advanced System Settings.

Click "Edit". Select the "Net.BMCNetworkEnable" value and configure it to "0".

or

From a PowerCLI command prompt while connected to the ESXi host, run the following command:

Get-VMHost | Get-AdvancedSetting -Name Net.BMCNetworkEnable | Set-AdvancedSetting -Value 0

See Also

https://workbench.cisecurity.org/benchmarks/23619

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-265977r1003587_rule, STIG-ID|ESXI-80-000250, Vuln-ID|V-265977

Plugin: VMware

Control ID: 6b7cb677ef851e5e28b7ce5932265ecfbedb71faa96ed73a530ed05d5dec0a36