Detections
Analytics

ESXI-67-000052 - The ESXi host must protect the confidentiality and integrity of transmitted information by using different TCP/IP stacks where possible.

Information

Three different TCP/IP stacks are available by default on ESXi: Default, Provisioning, and vMotion.

To better protect and isolate sensitive network traffic within ESXi, administrators must configure each of these stacks. Additional custom TCP/IP stacks can be created if desired.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

From the vSphere Client, select the ESXi host and go to Configure >> Networking >> TCP/IP configuration.

Select a TCP/IP stack and click 'Edit'.

Enter the appropriate site-specific IP address information for the particular TCP/IP stack and click 'OK'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y23M07_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8, CAT|III, CCI|CCI-002418, Rule-ID|SV-239306r854602_rule, STIG-ID|ESXI-67-000052, Vuln-ID|V-239306

Plugin: VMware

Control ID: ab96d938a2dba2371097f0eb5cbc89252734a554f493666f69d5caafe1a5c1f1