Host must isolate storage communications

СреднийУровень 1Ручная проверкаvmware

Описание

Isolating storage communications through zoning and Logical Unit Number (LUN) masking is instrumental in segregating Storage Area Network (SAN) activity. Zoning defines the connections between host bus adapters (HBAs) and targets, ensuring devices outside a zone remain invisible to the devices within, thus facilitating the independent management of zones such as testing and ... Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

The audit procedures to verify SAN activity is properly segregated are SAN vendor or product-specific.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

The remediation procedures to properly segregate SAN activity are SAN vendor or product-specific. In general, with ESXi hosts, use a single-initiator zoning or a single-initiator-single-target zoning. The latter is a preferred zoning practice. Using the more restrictive zoning prevents problems and misconfigurations that can occur on the SAN.

Свойства

Операционные системы: Любая
Теги: vmwareesxiservices
Источник: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 6.2.1 Host must isolate storage communications