Detections
Analytics

VCLU-70-000029 - Lookup Service must be configured with the appropriate ports.

Information

Web servers provide numerous processes, features, and functionalities that use TCP/IP ports. Some of these processes may be deemed unnecessary or too unsecure to run on a production system. The ports that Lookup Service listens on are configured in the 'catalina.properties' file and must be verified as accurate to their shipping state.

Solution

Navigate to and open:

/usr/lib/vmware-lookupsvc/conf/catalina.properties

Navigate to the port's specification section.

Set the Lookup Service port specifications according to the shipping configuration below:

base.shutdown.port=-1
base.jmx.port=-1
bio-custom.http.port=7090
bio-custom.https.port=8443

Restart the service with the following command:

# vmon-cli --restart lookupsvc

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_7-0_Y23M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(1)(b), CAT|II, CCI|CCI-001762, Rule-ID|SV-256734r888793_rule, STIG-ID|VCLU-70-000029, Vuln-ID|V-256734

Plugin: Unix

Control ID: 28a7144c3f5b2ab04ce7e3dc871bae16e9ce4531bfe3112c43a62bf7acbf4488