HPE Nimble must not be configured to use "HPE Greenlake: Data Services Cloud Console".

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-259800	HPEN-NM-000222	SV-259800r960966_rule		Medium

Description

DOD requires that the Mission Owner uses only the cloud services offering listed in either the FedRAMP or DISA PA DOD Cloud Catalog to host Unclassified, public-releasable, DOD information. Management by "HPE Greenlake: Data Services Cloud Console" is disabled by default for HPE Nimble and must not be enabled.

STIG	Date
HPE Nimble Storage Array NDM Security Technical Implementation Guide	2024-06-20

Details

Check Text (C-63531r944371_chk)

Ensure cloud console is disabled.
Type "group --info |grep -i "cloud enabled".

If the response is "cloud enabled: Yes", this is a finding.

Fix Text (F-63438r944372_fix)

Disable cloud console
Navigate to Administration >> Customization >> Data Services Cloud Console.

Uncheck "Connect to Data Services Cloud Console".