Item Search

NameAudit NamePluginCategory
1.6 Host integrated hardware management controller must enable time synchronizationCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

2.7 Host must have time synchronization services enabled and runningCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

AUDIT AND ACCOUNTABILITY

3.22 Host must deny shell access for the dcui accountCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

3.25 Host must display a login banner for SSH connectionsCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

3.25 Host must display a login banner for SSH connectionsCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

4.5 Host must deactivate log filteringCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

AUDIT AND ACCOUNTABILITY

4.6 Host must enable audit record loggingCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

AUDIT AND ACCOUNTABILITY

4.6 Host must enable audit record loggingCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

AUDIT AND ACCOUNTABILITY

4.7 Host must configure a persistent log location for all locally stored audit recordsCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

AUDIT AND ACCOUNTABILITY

4.8 Host must store one week of audit recordsCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

AUDIT AND ACCOUNTABILITY

4.11 Host must use strict x509 verification for TLS-enabled remote logging endpointsCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

6.2.2 Host must ensure all datastores have unique namesCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

SYSTEM AND COMMUNICATIONS PROTECTION

6.4.1 Host SNMP services, if enabled, must limit accessCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

6.5.1 Host SSH daemon, if enabled, must use FIPS 140-2/140-3 validated ciphersCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.5.2 Host SSH daemon, if enabled, must use FIPS 140-2/140-3 validated cryptographic modulesCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.5.2 Host SSH daemon, if enabled, must use FIPS 140-2/140-3 validated cryptographic modulesCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.5.4 Host SSH daemon, if enabled, must not allow host-based authenticationCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.5 Host SSH daemon, if enabled, must set a timeout count on idle sessionsCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.7 Host SSH daemon, if enabled, must display the system login banner before granting accessCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.7 Host SSH daemon, if enabled, must display the system login banner before granting accessCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.8 Host SSH daemon, if enabled, must ignore .rhosts filesCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.8 Host SSH daemon, if enabled, must ignore .rhosts filesCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.9 Host SSH daemon, if enabled, must disable stream local forwardingCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.10 Host SSH daemon, if enabled, must disable TCP forwardingCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.10 Host SSH daemon, if enabled, must disable TCP forwardingCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.11 Host SSH daemon, if enabled, must not permit tunnelsCIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

7.25 Virtual machines must enable diagnostic loggingCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

AUDIT AND ACCOUNTABILITY

CIS_Apple_macOS_14_Sonoma_STIG_v1.0.0_CAT_I.audit from CIS Apple macOS 14 Sonoma STIG v1.0.0CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT IUnix
CIS_Apple_macOS_14_Sonoma_STIG_v1.0.0_CAT_III.audit from CIS Apple macOS 14 Sonoma STIG v1.0.0CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT IIIUnix
CIS_Apple_macOS_15_Sequoia_STIG_v1.1.0_CAT_I.audit from CIS Apple macOS 15 Sequoia STIG v1.1.0CIS Apple macOS 15 Sequoia STIG v1.1.0 CAT IUnix
CIS_Apple_macOS_15_Sequoia_STIG_v1.1.0_CAT_II.audit from CIS Apple macOS 15 Sequoia STIG v1.1.0CIS Apple macOS 15 Sequoia STIG v1.1.0 CAT IIUnix
CIS_Apple_macOS_26_Tahoe_STIG_v1.0.0_CAT_I.audit from CIS Apple macOS 26 Tahoe STIG v1.0.0CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT IUnix
CIS_Apple_macOS_26_Tahoe_STIG_v1.0.0_CAT_III.audit from CIS Apple macOS 26 Tahoe STIG v1.0.0CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT IIIUnix
CIS_IBM_WebSphere_Liberty_Server_STIG_v1.0.0_CAT_I.audit from CIS IBM WebSphere Liberty Server STIG v1.0.0CIS IBM WebSphere Liberty Server STIG v1.0.0 CAT IUnix
CIS_Microsoft_IIS_10.0_Site_STIG_v1.0.0_CAT_I.audit from CIS Microsoft IIS 10.0 Site STIG v1.0.0CIS Microsoft IIS 10.0 Site STIG v1.0.0 CAT IWindows
CIS_Microsoft_Office_365_ProPlus_STIG_v1.1.0_CAT_II.audit from CIS Microsoft Office 365 ProPlus STIG v1.1.0CIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT IIWindows
CIS_Microsoft_Office_System_2016_STIG_v1.0.0_CAT_II.audit from CIS Microsoft Office System 2016 STIG v1.0.0CIS Microsoft Office System 2016 STIG v1.0.0 CAT IIWindows
CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_DC_CAT_I.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IWindows
CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_DC_CAT_III.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIIWindows
CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_MS_CAT_III.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT IIIWindows
CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_DC_CAT_I.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IWindows
CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_DC_CAT_II.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows
CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_DC_CAT_III.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIIWindows
CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_MS_CAT_II.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows
CIS_Microsoft_Windows_Server_2022_STIG_v4.0.0_DC_CAT_II.audit from CIS Microsoft Windows Server 2022 STIG v4.0.0CIS Microsoft Windows Server 2022 STIG v4.0.0 DC CAT IIWindows
CIS_Microsoft_Windows_Server_2022_STIG_v4.0.0_MS_CAT_I.audit from CIS Microsoft Windows Server 2022 STIG v4.0.0CIS Microsoft Windows Server 2022 STIG v4.0.0 MS CAT IWindows
CIS_Microsoft_Windows_Server_2022_STIG_v4.0.0_MS_CAT_II.audit from CIS Microsoft Windows Server 2022 STIG v4.0.0CIS Microsoft Windows Server 2022 STIG v4.0.0 MS CAT IIWindows
CIS_Ubuntu_Linux_22.04_LTS_STIG_v1.0.0_CAT_II.audit from CIS Ubuntu Linux 22.04 LTS STIG v1.0.0CIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT IIUnix
CIS_Ubuntu_Linux_24.04_LTS_STIG_v1.0.0_CAT_II.audit from CIS Ubuntu Linux 24.04 LTS STIG v1.0.0CIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT IIUnix
DISA_STIG_JRE_8_Unix_v1r3.audit for Oracle JRE 8 UNIX STIG, v1r3DISA STIG Oracle JRE 8 Unix v1r3Unix