HPE Nimble must not be configured to use "HPE Greenlake: Data Services Cloud Console".

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-259800HPEN-NM-000222SV-259800r960966_ruleCCI-000382medium
Description
DOD requires that the Mission Owner uses only the cloud services offering listed in either the FedRAMP or DISA PA DOD Cloud Catalog to host Unclassified, public-releasable, DOD information. Management by "HPE Greenlake: Data Services Cloud Console" is disabled by default for HPE Nimble and must not be enabled.
STIGDate
HPE Nimble Storage Array NDM Security Technical Implementation Guide2024-06-20

Related Frameworks

3 paths across 3 frameworks
NIST 800-531 mapping
CM-7
1.00
  • DISA · V2R1 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.4.6
1.00
  • DISA · V2R1 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000382
1.00
  • DISA · V2R1 · disa_xccdf · related

Details

Check Text (C-259800r960966_chk)

Ensure cloud console is disabled. Type "group --info |grep -i "cloud enabled". If the response is "cloud enabled: Yes", this is a finding.

Fix Text (F-63438r944372_fix)

Disable cloud console Navigate to Administration >> Customization >> Data Services Cloud Console. Uncheck "Connect to Data Services Cloud Console".