Host must deactivate SLP

MediaNivel 1Automatizadavmware

Descripción

The Service Location Protocol (SLP) is used for the discovery and selection of network services in local area networks, which simplifies configuration by allowing computers to find necessary services automatically. The practice of deactivating SLP when not in use aligns with the principle of minimizing the attack surface by shutting down non-essential services. The audit runs /etc/init.d/slpd status and requires "not running". Runs in the ESXi Shell (busybox sh) as root.

Cómo se verifica

Método de auditoría: Comando de shell

shell

st=$(/etc/init.d/slpd status 2>&1)
case "$st" in *'not running'*) echo compliant ;; *running*) echo 'slpd is running' ;; *) echo "slpd status: $st"; exit 1 ;; esac

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

1. Stop SLP if running: /etc/init.d/slpd stop Note: Confirm no operational dependency requires SLP before disabling it.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: vmwareesximanagement
Referencia: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 3.4 Host must deactivate SLP

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target vmware