6.4

IPv6, deny IPv6 router preference in router
solicitations 49
IPv6, ignore ICMP redirect messages 45
IPv6, restrict IPv6 maximum addresses 51
K
kernel message logging 32
L
local administrative account, creating 16
logging 53
M
maintenance mode authentication 20
managing nonessential software 29
minimal necessary groups 20
minimal user accounts 20
minimum incoming ports 52
minimum permissions, agent functionality 36
monitor minimal necessary groups 20
monitor minimal user accounts 20
N
network settings 43
network time protocol 34
O
open ports on agent host 39
OVF, network settings 43
P
password expiry 15
patching 41
platform files and permissions, Linux 36
platform files and permissions, Windows 37
ports
incoming 43
outgoing 43
ports and protocols, configuring 51
prevent user control 43
R
reinstate an agent resource 40
remote logging server > securing 53
remove the agent resource 39
removing sample code:Apache2 server 28
resetting the password on Linux clusters 21
review installed software 10
revoking an agent 39
root password, change 14
root user, secure shell 15
S
secure
Appletalk Protocol 31
Firewire Module 31
Internet Packet Exchange Protocol 31
Reliable Datagram Sockets protocol 30
Transparent Inter-Process Communication
protocol 30
secure configuration 13
Secure Shell, restricting access 17
secure deployment of vRealize Operations
Manager 9
secure remote logging server 53
secure shell client configuration 18
secure shell file permissions 17
secure shell server configuration 17
Secure Shell, managing 15
secure the console 14
security posture 7
security advisories, patches 11
server configuration, secure shell 17
single-user authentication 20
Stream Control Transmission Protocol 29
strong protocols 33, 34
strong ciphers 33, 35
strong ciphers, configure 24
strong protocols, configure 23
T
TCP backlog queue size 43
third-party software 10
TLS for data in transit 23, 33, 34
U
unnecessary applications, delete 41
updates 41
updating certificates 40
USB mass storage handler 29
V
verify, server user account settings 41
verify secure baseline 34
verify server tokens:apache2 server 28
verifying the installation media 9
virtual appliances
Bluetooth protocol handler 29
boot loader authentication 19
configure network time protocol 22
enable or disable Secure Shell 16
USB mass storage handler 29
virtual machines, disable IPv4 proxy ARP 44
virtual machines, deny ICMPv4 echoes to
broadcast address 44
Secure Configuration
56 VMware, Inc.