| 1.1.3.9.7 Configure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default)' | CIS Windows 8 L1 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.4.5 Disable Remote Login | CIS Apple OSX 10.11 El Capitan L1 v1.1.0 | Unix | ACCESS CONTROL |
| 2.4.5 Disable Remote Login | CIS Apple OSX 10.10 Yosemite L1 v1.2.0 | Unix | ACCESS CONTROL |
| 6.1 Setup Client-cert Authentication | CIS Apache Tomcat 8 L2 v1.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| DTAVSEL-003 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to enable On-Access scanning. | McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| ESXi : config-firewall-access - 'CIM Secure Server allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'CIM SLP allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'DVSSync blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'gdbserver blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'Software iSCSI Client blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'VM serial port connected over network blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : disable-ssh | VMWare vSphere 5.X Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| ESXi : enable-chap-auth | VMWare vSphere 5.X Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : enable-host-profiles | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : set-password-complexity | VMWare vSphere 5.X Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : verify-acceptance-level-accepted | VMWare vSphere 5.X Hardening Guide | VMware | |
| JBOS-AS-000025 - Java permissions must be set for hosted applications. | DISA JBoss Enterprise Application Platform 6.3 STIG v2r6 | Unix | ACCESS CONTROL |
| JBOS-AS-000305 - LDAP enabled security realm value allow-empty-passwords must be set to false. | DISA JBoss Enterprise Application Platform 6.3 STIG v2r6 | Unix | IDENTIFICATION AND AUTHENTICATION |
| vCenter : block-unused-ports | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : disable-datastore-web | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : disable-mob | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : install-with-service-account | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : limit-user-login | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : no-self-signed-certs | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : restrict-Linux-clients | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : secure-vcenter-os | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : Verify-RDP-encryption | VMWare vSphere 5.X Hardening Guide | VMware | |
| VCSA : config-ntp | VMWare vSphere 5.X Hardening Guide | VMware | |
| VCSA : restrict-network-access | VMWare vSphere 5.X Hardening Guide | VMware | |
| VM : control-resource-usage | VMWare vSphere 5.X Hardening Guide | VMware | |
| VM : disable-unnecessary-functions | VMWare vSphere 5.X Hardening Guide | VMware | |
| VM : secure-guest-os | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : disable-dvportgroup-autoexpand | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : document-vlans-vds | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : enable-portfast | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : isolate-mgmt-network-airgap | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : isolate-storage-network-vlan | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : label-portgroups | VMWare vSphere 5.X Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| vNetwork : label-vswitches | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : no-native-vlan-1 | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : reject-forged-transmit-dvportgroup | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : reject-mac-change-dvportgroup | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : reject-mac-changes - 'PortGroup' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : reject-mac-changes - 'vSwitch' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : reject-promiscuous-mode - 'PortGroup' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : reject-promiscuous-mode-dvportgroup | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : restrict-port-level-overrides | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : restrict-portmirror-usage | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : no-vum-self-management | VMWare vSphere 5.X Hardening Guide | VMware | |
| WebClient : web-client-timeout | VMWare vSphere 5.X Hardening Guide | VMware | |