← Back to HPE Nimble Storage Array NDM Security Technical Implementation Guide

V-252902

CAT II (Medium)

HPE Nimble must be configured to disable HPE InfoSight.

Rule ID

SV-252902r960966_rule

STIG

HPE Nimble Storage Array NDM Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-000382

Discussion

DoD requires that the Mission Owner uses only the cloud services offering listed in either the FedRAMP or DISA PA DoD Cloud Catalog to host Unclassified, public-releasable, DoD information. HPE InfoSight data collection is disabled by default in the HPE Nimble. Users must not enable it.

Check Content

Navigate to Administration >> Alerts and Monitoring page of the storage array management interface. Verify the checkbox is not checked.

If HPE InfoSight is enabled, this is a finding.

Fix Text

In HPE Nimble Storage arrays, data collection is disabled by default.

Navigate to Administration >> Alerts and Monitoring page of the storage array management interface. 

Uncheck the checkbox.