← Back to Nutanix Acropolis Application Server Security Technical Implementation Guide

V-279430

CAT II (Medium)

Nutanix AOS must configure the Nutanix Cluster Check (NCC) to alert the information system security officer (ISSO)/information system security manager (ISSM) or designated personnel, at a minimum.

Rule ID

SV-279430r1191372_rule

STIG

Nutanix Acropolis Application Server Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-003831

Discussion

NCC is a diagnostic framework designed to ensure the health and stability of Nutanix clusters. It consists of a collection of scripts and tools that perform automated checks to identify potential issues in the cluster's configuration, performance, and overall health. Users can run all checks or select specific ones based on their needs. NCC is an essential tool for maintaining the health and reliability of Nutanix environments, providing both automated diagnostics and actionable insights for administrators. NCC is an essential tool for maintaining the health and reliability of Nutanix environments, providing both automated diagnostics and actionable insights for administrators. However, the information contained in the report is sensitive and the report should be appropriately identified personnel.

Check Content

Verify the Nutanix NCC is set to send SMTP send alerts to the ISSO/ISSM (or designated personnel), at a minimum. The site can define a frequency that meets their needs.

1. Log in to Prism Element.
2. Select "Health dashboard".
3. In the "Actions" tab, select "Set NCC Frequency".

If the organization-defined recipient(s) are not configured for the NCC, this is a finding.

Fix Text

Configure the NCC to alert the ISSO/ISSM or designated personnel, at a minimum. The site can define a frequency that meets their needs.

1. Log in to Prism Element.
2. Select "Health dashboard".
3. In the "Actions" tab, select "Set NCC Frequency".
4. Enter frequency timeframe.
5. Enter recipient email address(es).