Home Data Center DoD VMware Security White Paper “ESX Server Security Technical Implementation Guide”

DoD VMware Security White Paper “ESX Server Security Technical Implementation Guide”


The following Information Systems Agency (DISA) Field Security Operations (FSO) and Department of Defense (DoD) white paper virtualization white paper will assist you in meeting the minimum requirements, standards, controls, and options that must be in place for VMware ESX Server infrastructures.

A core mission for the Defense Information Systems Agency (DISA) Field Security Operations (FSO) is to secure Department of Defense (DoD) Computing systems. The processes and procedures outlined in this Security Technical Information Guide (STIG), when applied, will decrease the risk of unauthorized disclosure of sensitive information. Security is clearly still one of the biggest concerns for our DoD customers, for example, the war fighter.

The requirements set forth in this document will assist Information Assurance Managers (IAM), Information Assurance Officers (IAO/SA), Network Security Officers (NSO), and System Administrators (SAs) in support of protecting DoD Virtual Computing systems.

The Information Operations Condition (INFOCON) for the DoD recommends actions during periods when a heightened defensive posture is required to protect DoD computer networks from attack. The IAO will ensure compliance with the security requirements of the current INFOCON level and will modify security requirements to comply with this guidance. Password length and complexity given throughout this document must be adjusted as needed to comply with INFOCON guidance.

This document contains a set of principles and guidelines that serve as the basis for establishing VMware ESX Server environments within the DoD. This STIG will focus on guidance for the ESX Server.

The policy portions of this STIG are relevant to all ESX Servers connected to either the DoD Unclassified (But Sensitive) Internet Protocol Router Network (NIPRNet) or Secret Internet Protocol Router Network (SIPRNet).

To learn more and to download the above VMware security white paper please visit: VMware ESX Server Security Technical Implementation Guide



More Resources:

DABCC DABCC.com, the world leader in sharing the finest Virtualization & Cloud news and support resources. #Citrix, #VMware, #Microsoft, #Mobility and much more! Brought to you by @douglasabrown & team!

White Papers

    What’s New in System Center 2016 – White Paper

    Today, we’re excited to announce the general availability of Microsoft System Center 2016. System Center 2016 makes it easy for you to deploy, configure and manage your virtualized, software-defined datacenter and hybrid cloud infrastructure. The latest release of System Center offers an array of new capabilities that amplify your ability to meet the most demanding business […]


      Citrix Load & Performance Testing – Download AppLoader!

      Load testing for Citrix XenApp, XenDesktop, PeopleSoft, Java, .NET, Adobe, client-server, Oracle, Siebel, SAP, web, custom apps and more Download NRG Global’s load and performance testing solution for all applications from the end user’s perspective. This easy-to-use, script-free load and performance testing solution stresses your application with real-life traffic to accurately assess end to end […]

      On-Demand Webinars

        Webinar Recap: Docker for Windows Server 2016

        Last week, we held our first webinar on “Docker for Windows Server 2016” to a record number of attendees, showcasing the most exciting new Windows Server 2016 feature – containers powered by Commercially Supported Docker Engine. Docker CS Engine and containers are now available natively on Windows and supported by Microsoft with Docker’s Commercially Supported […]

        Latest Videos

          Introduction to Syskit 2016 R2

          In this video, we present you the all-new SysKit 2016 R2 and Its revolutionary features: SharePoint Performance Monitoring Specific server roles monitoring with Monitoring Templates Automated Server Documentation through the use of PowerShell We’ll go through a demo with real-life use cases for this features to better portrait the wide range of tasks they can […]