TMA-ESXI9-3.4

Host must deactivate SLP

SedangLevel 1Otomatisvmware

Deskripsi

The Service Location Protocol (SLP) is used for the discovery and selection of network services in local area networks, which simplifies configuration by allowing computers to find necessary services automatically. The practice of deactivating SLP when not in use aligns with the principle of minimizing the attack surface by shutting down non-essential services. The audit runs /etc/init.d/slpd status and requires "not running". Runs in the ESXi Shell (busybox sh) as root.

Cara pemeriksaan

Metode audit: Perintah shell

shell

st=$(/etc/init.d/slpd status 2>&1)
case "$st" in *'not running'*) echo compliant ;; *running*) echo 'slpd is running' ;; *) echo "slpd status: $st"; exit 1 ;; esac

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

1. Stop SLP if running: /etc/init.d/slpd stop Note: Confirm no operational dependency requires SLP before disabling it.

Properti

Sistem operasi: Apa saja
Tag: vmwareesximanagement
Referensi: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 3.4 Host must deactivate SLP

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target vmware