| DISA_STIG_VMware_vSphere_7.0_vCA_UI_v1r2.audit from DISA VMware vSphere 7.0 vCenter Appliance UI v1r2 STIG | |
| VCUI-70-000001 - vSphere UI must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive. | ACCESS CONTROL |
| VCUI-70-000002 - vSphere UI must limit the number of concurrent connections permitted. | ACCESS CONTROL |
| VCUI-70-000003 - vSphere UI must limit the maximum size of a POST request. | ACCESS CONTROL |
| VCUI-70-000004 - vSphere UI must protect cookies from cross-site scripting (XSS). | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000005 - vSphere UI must record user access in a format that enables monitoring of remote access. | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| VCUI-70-000006 - vSphere UI must generate log records for system startup and shutdown. | AUDIT AND ACCOUNTABILITY |
| VCUI-70-000007 - vSphere UI log files must only be accessible by privileged users. | AUDIT AND ACCOUNTABILITY |
| VCUI-70-000008 - vSphere UI application files must be verified for their integrity. | CONFIGURATION MANAGEMENT |
| VCUI-70-000009 - vSphere UI plugins must be authorized before use. | CONFIGURATION MANAGEMENT |
| VCUI-70-000010 - vSphere UI must not be configured with the 'UserDatabaseRealm' enabled. | CONFIGURATION MANAGEMENT |
| VCUI-70-000011 - vSphere UI must be configured to limit access to internal packages. | CONFIGURATION MANAGEMENT |
| VCUI-70-000012 - vSphere UI must have Multipurpose Internet Mail Extensions (MIME) that invoke operating system shell programs disabled. | CONFIGURATION MANAGEMENT |
| VCUI-70-000013 - vSphere UI must have mappings set for Java servlet pages. | CONFIGURATION MANAGEMENT |
| VCUI-70-000014 - vSphere UI must not have the Web Distributed Authoring (WebDAV) servlet installed. | CONFIGURATION MANAGEMENT |
| VCUI-70-000015 - vSphere UI must be configured with memory leak protection. | CONFIGURATION MANAGEMENT |
| VCUI-70-000016 - vSphere UI must not have any symbolic links in the web content directory tree. | CONFIGURATION MANAGEMENT |
| VCUI-70-000017 - The vSphere UI directory tree must have permissions in an out-of-the-box state. | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000018 - vSphere UI must restrict its cookie path. | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000019 - vSphere UI must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail. | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000020 - vSphere UI must limit the number of allowed connections. | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000021 - vSphere UI must set URIEncoding to UTF-8. | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-70-000022 - vSphere UI must set the welcome-file node to a default web page. | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-70-000023 - The vSphere UI must not show directory listings. | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-70-000024 - vSphere UI must be configured to hide the server version. | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-70-000025 - vSphere UI must be configured to show error pages with minimal information. | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-70-000026 - vSphere UI must not enable support for TRACE requests. | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-70-000027 - vSphere UI must have the debug option turned off. | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-70-000028 - vSphere UI must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the web server. | AUDIT AND ACCOUNTABILITY |
| VCUI-70-000029 - vSphere UI log files must be moved to a permanent repository in accordance with site policy. | AUDIT AND ACCOUNTABILITY |
| VCUI-70-000030 - vSphere UI must be configured with the appropriate ports. | CONFIGURATION MANAGEMENT |
| VCUI-70-000031 - vSphere UI must disable the shutdown port. | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000032 - vSphere UI must set the secure flag for cookies. | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000033 - The vSphere UI default servlet must be set to 'readonly'. | CONFIGURATION MANAGEMENT |
