CIS VMware ESXi 7.0 v1.1.0 Level 2

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS VMware ESXi 7.0 v1.1.0 Level 2

Updated: 7/25/2023

Authority: CIS

Plugin: VMware

Revision: 1.8

Estimated Item Count: 32

Audit Items

DescriptionCategories
1.4 Ensure the default value of individual salt per vm is configured
2.9 Ensure VDS health check is disabled
5.6 Ensure Strict Lockdown mode is enabled
5.11 Ensure contents of exposed configuration files have not been modified
6.2 Ensure the uniqueness of CHAP authentication secrets for iSCSI traffic
8.1.2 Ensure only one remote console connection is permitted to a VM at any time
8.2.2 Ensure unnecessary CD/DVD devices are disconnected
8.4.2 Ensure Autologon is disabled
8.4.3 Ensure BIOS BBS is disabled
8.4.4 Ensure Guest Host Interaction Protocol Handler is set to disabled
8.4.5 Ensure Unity Taskbar is disabled
8.4.6 Ensure Unity Active is disabled
8.4.7 Ensure Unity Window Contents is disabled
8.4.8 Ensure Unity Push Update is disabled
8.4.9 Ensure Drag and Drop Version Get is disabled
8.4.10 Ensure Drag and Drop Version Set is disabled
8.4.11 Ensure Shell Action is disabled
8.4.12 Ensure Request Disk Topology is disabled
8.4.13 Ensure Trash Folder State is disabled
8.4.14 Ensure Guest Host Interaction Tray Icon is disabled
8.4.15 Ensure Unity is disabled
8.4.16 Ensure Unity Interlock is disabled
8.4.17 Ensure GetCreds is disabled
8.4.18 Ensure Host Guest File System Server is disabled
8.4.19 Ensure Guest Host Interaction Launch Menu is disabled
8.4.20 Ensure memSchedFakeSampleStats is disabled
8.5.1 Ensure VM limits are configured correctly - CPU Share Level
8.5.1 Ensure VM limits are configured correctly - Mem Share Level
8.5.1 Ensure VM limits are configured correctly - Num Mem Shares
8.5.2 Ensure hardware-based 3D acceleration is disabled
8.6.1 Ensure nonpersistent disks are limited
8.7.2 Ensure host information is not sent to guests