8.4.28 Control access to VM console via VNC protocol

Information

Minimize access to the Virtual Machine via VNC protocol.

*Rationale*

The VM console enables you to connect to the console of a virtual machine, in effect seeing
what a monitor on a physical server would show. This console is also available via the VNC
protocol. Setting up this access also involves setting up firewall rules on each ESXi server
the virtual machine will run on.

Solution

To implement the recommended configuration state, run the following PowerCLI
command-# Add the setting to all VMs
Get-VM | New-AdvancedSetting -Name 'RemoteDisplay.vnc.enabled' -value $false


Impact-Configuring VM settings and opening up the firewall means multiple steps to be configured
and monitored.

See Also

https://workbench.cisecurity.org/files/145

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: VMware

Control ID: 5b6d2fe160b2b70ba7159565ad9513e437dfcb2e63fc8c07cf159be6b29f7aa1