NSX-T Compliance in VMware Aria Operations (SaaS)

Products

• VMware Aria Suite

Issue/Introduction

Security Hardening Guides provide prescriptive guidance for customers on how to deploy and operate VMware products in a secure manner.  The NSX-T Security Configuration Guide (SCG) is the baseline for hardening and auditing guidance for VMware NSX-T resources.  The compliance pack based on NSX-T Security Configuration Guide in specific helps you to monitor your NSX-T resources and adhere to the best practices as specified in the Security Configuration Guide by identifying compliance misconfigurations automatically. 

The VMware Aria Operations Compliance Pack for NSX-T is updated to support the following standards:

• NSX-T 3.2 Security Configuration Guide
• NSX-T 3.1 Security Configuration Guide
• NSX-T 3.0 Security Configuration Guide

Resolution

Attached to this article is NSXT SCG Controls in NSX Compliance Pack.xlsx which contains the details of the conditions implemented in VMware Aria Operations (SaaS) and is based on the above mentioned versions of the benchmark.
The list also has the details of manual controls where conditions are excluded from automated assessment.  This list of controls can be used to perform manual checks on your NSX-T environments.

Additional Information

Legal Disclaimer:
This compliance pack and the associated configuration guides are intended to provide general guidance for organizations that are considering VMware solutions to help them address compliance requirements. This is not intended to provide regulatory advice and is provided “AS IS”. VMware makes no claims, promises or guarantees about the accuracy, completeness, or adequacy of the information contained herein. Organizations should engage appropriate legal, business, technical, and audit expertise within their specific organization for review of regulatory compliance requirements.