Detections
Analytics

ESXi: esxi-8.deactivate-ssh

Information

The ESXi SSH service should be deactivated. Services which are not in use and are non-essential for operations should be deactivated.

Solution

Get-VMHostService -VMHost $ESXi | where {$_.Key -eq 'TSM-SSH'} | Set-VMHostService -Policy Off
Get-VMHostService -VMHost $ESXi | where {$_.Key -eq 'TSM-SSH'} | Stop-VMHostService

See Also

https://github.com/vmware/vcf-security-and-compliance-guidelines/raw/refs/heads/main/security-configuration-hardening-guide/vsphere/8.0/

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-17(1), 800-53|AC-17(9), 800-53|CM-7a., CCI|CCI-000381, CCI|CCI-002314, CCI|CCI-002322

Plugin: VMware

Control ID: 14ef055219e3019c176b86c5e9f888ac8b5ae7a66602370d125c4f1f5a023881