| 1.1 Host hardware must have auditable, authentic, and up to date system & device firmware | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | SYSTEM AND SERVICES ACQUISITION |
| 1.1 Host hardware must have auditable, authentic, and up to date system & device firmware | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | SYSTEM AND SERVICES ACQUISITION |
| 1.3 Host hardware must enable Intel TXT, if available | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 1.7 Host integrated hardware management controller must enable remote logging of events | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 1.12 Host integrated hardware management controller must deactivate internal networking | CIS VMware ESXi 8.0 v1.4.0 L2 VMware | VMware | CONFIGURATION MANAGEMENT |
| 1.15 APPL-14-000033 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II | Unix | ACCESS CONTROL |
| 2.6 Host must have reliable time synchronization sources | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 2.9 Host must not suppress warnings about unmitigated hyperthreading vulnerabilities | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 2.9 Host must not suppress warnings about unmitigated hyperthreading vulnerabilities | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 2.12 Host must enable volatile key destruction | CIS VMware ESXi 9.0 v1.0.0 L2 VMware | VMware | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 3.4 Host must deactivate SLP | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 3.10 Host must not suppress warnings that the shell is enabled | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | SYSTEM AND INFORMATION INTEGRITY |
| 3.11 Host must enforce password complexity | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| 3.13 Host must unlock accounts after a specified timeout period | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | ACCESS CONTROL |
| 3.14 Host must configure the password history setting to restrict the reuse of passwords | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| 3.16 Host must configure a session timeout for the API | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.17 Host must automatically terminate idle host client sessions | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.17 Host must automatically terminate idle host client sessions | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.19 Host must have an accurate Exception Users list | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | ACCESS CONTROL, MEDIA PROTECTION |
| 3.24 Host must display a login banner for the DCUI and Host Client | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.1 Host must configure a persistent log location for all locally stored system logs | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 4.2 Host must transmit system logs to a remote log collector | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 4.3 Host must log sufficient information for events | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 4.9 Host must transmit audit records to a remote log collector | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 4.9 Host must transmit audit records to a remote log collector | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 5.5 Host should deactivate virtual hardware management network interfaces | CIS VMware ESXi 8.0 v1.4.0 L2 VMware | VMware | CONFIGURATION MANAGEMENT |
| 5.8 Host should reject promiscuous mode requests on standard virtual switches and port groups | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.2.1 Host must isolate storage communications | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.2.1 Host must isolate storage communications | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.3.1 Host iSCSI client, if enabled, must employ bidirectional/mutual CHAP authentication | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.3.2 Host iSCSI client, if enabled, must employ unique CHAP authentication secrets | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| 7.1 Virtual machines must enable Secure Boot | CIS VMware ESXi 8.0 v1.4.0 L2 VMware | VMware | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 7.2 Virtual machines must require encryption for vMotion | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.4 Virtual machines should deactivate 3D graphics features when not required | CIS VMware ESXi 8.0 v1.4.0 L2 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.4 Virtual machines should deactivate 3D graphics features when not required | CIS VMware ESXi 9.0 v1.0.0 L2 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.7 Virtual machines must limit PCI/PCIe device passthrough functionality | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.7 Virtual machines must limit PCI/PCIe device passthrough functionality | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.8 Ensure unauthorized modification and disconnection of devices is disabled | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.12 Virtual machines must remove unnecessary USB/XHCI devices | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.14 Virtual machines must remove unnecessary parallel port devices | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.14 Virtual machines must remove unnecessary parallel port devices | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.16 Virtual machines must remove unnecessary floppy devices | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.17 Virtual machines must deactivate console drag and drop operations | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.19 Virtual machines must deactivate console paste operations | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.25 Virtual machines must enable diagnostic logging | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 7.26 Virtual machines must limit the number of retained diagnostic logs | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 7.27 Virtual machines must limit the size of diagnostic logs | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 7.28 Virtual machines must limit informational messages from the virtual machine to the VMX file | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 7.28 Virtual machines must limit informational messages from the virtual machine to the VMX file | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| MD3X-00-001100 - MongoDB must be configured in accordance with the security configuration settings based on DoD security configuration and implementation guidance, including STIGs, NSA configuration guides, CTOs, DTMs, and IAVMs. | DISA STIG MongoDB Enterprise Advanced 3.x v2r3 OS | Unix | CONFIGURATION MANAGEMENT |
