Detections
Analytics

ESXI-06-000010 - The VMM must use DoD-approved encryption to protect the confidentiality of remote access sessions.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Approved algorithms should impart some level of confidence in their implementation. These are also required for compliance. Note: This does not imply FIPS 140-2 certification.

 NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Limit the ciphers to those algorithms which are FIPS-approved. Counter (CTR) mode is also preferred over cipher-block chaining (CBC) mode.

Add or correct the following line in '/etc/ssh/sshd_config':

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc

See Also

http://iasecontent.disa.mil/stigs/zip/U_VMware_vSphere_6-0_ESXi_V1R4_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000068, Group-ID|V-63189, Rule-ID|SV-77679r2_rule, STIG-ID|ESXI-06-000010

Plugin: VMware

Control ID: a614c28b0629773e98dda7eb6d7216c1a9a8dba4866b62331caa86cc262fa326