DISA STIGS Viewer

The NSX Manager must not provide environment information to third parties.

Overview

Finding ID Version Rule ID IA Controls Severity
V-265349 NMGR-4X-000088 SV-265349r994270_rule   Low
Description
Providing technical details about an environment's infrastructure to third parties could unknowingly expose sensitive information to bad actors if intercepted.
STIG Date
VMware NSX 4.x Manager NDM Security Technical Implementation Guide 2024-12-13

Details

Check Text (C-69266r994268_chk)
From the NSX Manager web interface, go to System >> Settings >> General Settings >> Customer Program >> Customer Experience Improvement Program.

If Joined is set to "Yes", this is a finding.
Fix Text (F-69174r994269_fix)
From the NSX Manager web interface, go to System >> Settings >> General Settings >> Customer Program >> Customer Experience Improvement Program, and then click "Edit".

Uncheck "Join the VMware Customer Experience Improvement Program" and click "Save".