VM : disconnect-devices-floppy

Information

Disconnect unauthorized devices.
Ensure that no device is connected to a virtual machine if it is not required. For example, serial and parallel ports are rarely used for virtual machines in a datacenter environment, and CD/DVD drives are usually connected only temporarily during software installation. For less commonly used devices that are not required, either the parameter should not be present or its value must be FALSE. NOTE: The parameters listed are not sufficient to ensure that a device is usable; other required parameters specify how each device is instantiated. Any enabled or connected device represents a potential attack channel.

When setting is set to FALSE, functionality is disabled, however the device may still show up withing the guest operation system.

http://pubs.vmware.com/vsphere-55/topic/com.vmware.vsphere.security.doc/GUID-822B2ED3-D8D2-4F57-8335-CA46E915A729.html

Solution

# Remove all Floppy drives attached to VMs -
Get-VM | Get-FloppyDrive | Remove-FloppyDrive

See Also

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/files/xls/vSphere_6_0_Hardening_Guide_GA_15_Jun_2015.xls

Item Details

Category: MEDIA PROTECTION

References: 800-53|MP-7

Plugin: VMware

Control ID: b4529579998c79fe54c2f848e0e8eaefa14c0c5a22f631a379cf2589c5889055