STIGhubSTIGhub
STIGsSearchCompareAbout

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • Compare Versions

Resources

  • About
  • VPAT
  • DISA STIG Library
STIGs updated 2 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to STIGs

VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide

Version

V1R1

Release Date

Oct 29, 2023

SCAP Benchmark ID

VMW_vSphere_8-0_VCSA_Perfcharts_STIG

Total Checks

33

Tags

vmware
CAT I: 0CAT II: 33CAT III: 0

This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.

Export CKLExport CSVExport JSONDownload STIG ZIP

Checks (33)

V-259071MEDIUMThe vCenter Perfcharts service must limit the number of maximum concurrent connections permitted.V-259072MEDIUMThe vCenter Perfcharts service cookies must have secure flag set.V-259073MEDIUMThe vCenter Perfcharts service must initiate session logging upon startup.V-259074MEDIUMThe vCenter Perfcharts service must produce log records containing sufficient information regarding event details.V-259075MEDIUMThe vCenter Perfcharts service logs folder permissions must be set correctly.V-259076MEDIUMThe vCenter Perfcharts service must limit privileges for creating or modifying hosted application shared files.V-259077MEDIUMThe vCenter Perfcharts service must disable stack tracing.V-259078MEDIUMThe vCenter Perfcharts service must be configured to use a specified IP address and port.V-259079MEDIUMThe vCenter Perfcharts service must be configured to limit data exposure between applications.V-259080MEDIUMThe vCenter Perfcharts service must be configured to fail to a known safe state if system initialization fails.V-259081MEDIUMThe vCenter Perfcharts service must set URIEncoding to UTF-8.V-259082MEDIUMThe vCenter Perfcharts service "ErrorReportValve showServerInfo" must be set to "false".V-259083MEDIUMThe vCenter Perfcharts service must set an inactive timeout for sessions.V-259084MEDIUMThe vCenter Perfcharts service must offload log records onto a different system or media from the system being logged.V-259085MEDIUMThe vCenter Perfcharts service must enable "STRICT_SERVLET_COMPLIANCE".V-259086MEDIUMThe vCenter Perfcharts service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive.V-259087MEDIUMThe vCenter Perfcharts service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive.V-259088MEDIUMThe vCenter Perfcharts service must configure the "setCharacterEncodingFilter" filter.V-259089MEDIUMThe vCenter Perfcharts service cookies must have "http-only" flag set.V-259090MEDIUMThe vCenter Perfcharts service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands.V-259091MEDIUMThe vCenter Perfcharts service shutdown port must be disabled.V-259092MEDIUMThe vCenter Perfcharts service debug parameter must be disabled.V-259093MEDIUMThe vCenter Perfcharts service directory listings parameter must be disabled.V-259094MEDIUMThe vCenter Perfcharts service deployXML attribute must be disabled.V-259095MEDIUMThe vCenter Perfcharts service must have Autodeploy disabled.V-259096MEDIUMThe vCenter Perfcharts service xpoweredBy attribute must be disabled.V-259097MEDIUMThe vCenter Perfcharts service example applications must be removed.V-259098MEDIUMThe vCenter Perfcharts service default documentation must be removed.V-259099MEDIUMThe vCenter Perfcharts service files must have permissions in an out-of-the-box state.V-259100MEDIUMThe vCenter Perfcharts service must disable "ALLOW_BACKSLASH".V-259101MEDIUMThe vCenter Perfcharts service must enable "ENFORCE_ENCODING_IN_GET_WRITER".V-259102MEDIUMThe vCenter Perfcharts service manager webapp must be removed.V-259103MEDIUMThe vCenter Perfcharts service host-manager webapp must be removed.