ESXI-67-000052 - The ESXi host must protect the confidentiality and integrity of transmitted information by using different TCP/IP stacks where possible.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Three different TCP/IP stacks are available by default on ESXi: Default, Provisioning, and vMotion.

To better protect and isolate sensitive network traffic within ESXi, administrators must configure each of these stacks. Additional custom TCP/IP stacks can be created if desired.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

From the vSphere Client, select the ESXi host and go to Configure >> Networking >> TCP/IP configuration.

Select a TCP/IP stack and click 'Edit'.

Enter the appropriate site-specific IP address information for the particular TCP/IP stack and click 'OK'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y22M10_STIG.zip

Item Details

References: CAT|III, CCI|CCI-002418, Rule-ID|SV-239306r674847_rule, STIG-ID|ESXI-67-000052, Vuln-ID|V-239306

Plugin: VMware

Control ID: efea721339911dfe7ef4ecb4824c4a5d02c537b3e8660784790b8f3d077cc78e