STIGUI
V-252902CAT II — Medium severitySV-252902r960966_rule

HPE Nimble must be configured to disable HPE InfoSight.

Rule version HPEN-NM-000221 · STIG v2 · 2024-06-20

Discussion

DoD requires that the Mission Owner uses only the cloud services offering listed in either the FedRAMP or DISA PA DoD Cloud Catalog to host Unclassified, public-releasable, DoD information.

HPE InfoSight data collection is disabled by default in the HPE Nimble. Users must not enable it.

Check

Navigate to Administration >> Alerts and Monitoring page of the storage array management interface. Verify the checkbox is not checked.

If HPE InfoSight is enabled, this is a finding.

Fix

In HPE Nimble Storage arrays, data collection is disabled by default.

Navigate to Administration >> Alerts and Monitoring page of the storage array management interface.

Uncheck the checkbox.

Identifiers

Group ID
V-252902
Group title
SRG-APP-000142-NDM-000245
Rule ID
SV-252902r960966_rule
Check ID
C-56357r822430_chk
Fix ID
F-56307r822431_fix