Host integrated hardware management controller must enable remote logging of events

Trung bìnhCấp 1Xem xét thủ côngvmware

Mô tả

The host's integrated hardware management controller provides critical out-of-band server oversight. For enhanced security, it is essential to configure this controller to log events remotely. This practice ensures that hardware-related logs are sent to an off-site location, protecting them from potential tampering and offering a centralized record of server health and ... Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Access the hardware management controller and verify that remote event logging/syslog forwarding is enabled and configured to send hardware, security, authentication, and management events to an approved centralized log collector.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Locate the controller's Syslog, Remote Logging, Event Forwarding, or equivalent configuration and: 1. Enable remote event logging. 2. Configure the hostname or IP address of the approved centralized log collector. 3. Configure the appropriate port and protocol. 4. Use TLS or another protected transport where supported. 5. Select the required event categories, including hardware, security, authentication, firmware, and administrative events. 6. Save the configuration.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: vmwareesxihardware
Tham chiếu: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 1.7 Host integrated hardware management controller must enable remote logging of events