| 1.23 VCUI-80-000136 | CIS VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.25 VCSA-80-000195 | CIS VMware vSphere 8.0 vCenter STIG v1.0.0 CAT II | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.27 ESXI-80-000194 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II VMware | VMware | CONFIGURATION MANAGEMENT |
| 1.52 VCSA-80-000288 | CIS VMware vSphere 8.0 vCenter STIG v1.0.0 CAT II | VMware | CONFIGURATION MANAGEMENT |
| 5.4 Enable lockdown mode to restrict remote access | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | |
| 8.4.21 Ensure Host Guest File System Server is disabled | CIS VMware ESXi 6.5 v1.0.0 Level 2 | VMware | SYSTEM AND INFORMATION INTEGRITY |
| 8.6 VMware Tools must limit the automatic removal of features | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 8.7.3 Do not send host information to guests | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| HTTP TRACE method should be disabled. 'RewriteCond' | TNS IBM HTTP Server Best Practice Middleware | Unix | CONFIGURATION MANAGEMENT |
| HTTP TRACE method should be disabled. 'RewriteLog' | TNS IBM HTTP Server Best Practice Middleware | Unix | CONFIGURATION MANAGEMENT |
| HTTP TRACE method should be disabled. 'RewriteLog' | TNS IBM HTTP Server Best Practice | Unix | CONFIGURATION MANAGEMENT |
| HTTP TRACE method should be disabled. 'RewriteLogLevel' | TNS IBM HTTP Server Best Practice | Unix | CONFIGURATION MANAGEMENT |
| HTTP TRACE method should be disabled. 'RewriteRule' | TNS IBM HTTP Server Best Practice | Windows | CONFIGURATION MANAGEMENT |
| HTTP TRACE method should be disabled. 'RewriteRule' | TNS IBM HTTP Server Best Practice | Unix | CONFIGURATION MANAGEMENT |
| HTTP TRACE method should be disabled. 'TraceEnable' | TNS IBM HTTP Server Best Practice | Windows | CONFIGURATION MANAGEMENT |
| SRG-OS-000120-ESXI5 - The password hashes stored on the system must have been generated using a FIPS 140-2 approved cryptographic hashing algorithm. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | IDENTIFICATION AND AUTHENTICATION |
| SRG-OS-000145-ESXI5 - The system must be configured with a default gateway for IPv4 if the system uses IPv4, unless the system is a router. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | ACCESS CONTROL |
| SRG-OS-99999-ESXI5-000145 - The system must ensure the vpxuser auto-password change meets policy. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | IDENTIFICATION AND AUTHENTICATION |
| SRG-OS-99999-ESXI5-000156 - The contents of exposed configuration files must be verified. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| vCenter: vcenter-8.administration-sso-password-policy | VMware vSphere Security Configuration and Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCLU-80-000013 - The vCenter Lookup service must initiate session logging upon startup. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| VCLU-80-000014 - The vCenter Lookup service must produce log records containing sufficient information regarding event details. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| VCLU-80-000081 - The vCenter Lookup service must off-load log records onto a different system or media from the system being logged. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| VCLU-80-000141 - The vCenter Lookup service example applications must be removed. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000142 - The vCenter Lookup service default ROOT web application must be removed. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000144 - The vCenter Lookup service files must have permissions in an out-of-the-box state. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000151 - The vCenter Lookup service must disable "ALLOW_BACKSLASH". | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-67-000019 - vSphere UI must set URIEncoding to UTF-8. | DISA STIG VMware vSphere 6.7 UI Tomcat v1r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-80-000067 - The vCenter UI service "ErrorReportValve showServerInfo" must be set to "false". | DISA VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v2r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-80-000067 The vCenter UI service 'ErrorReportValve showServerInfo' must be set to 'false'. | DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-80-000137 - The vCenter UI service directory listings parameter must be disabled. | DISA VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-80-000137 The vCenter UI service directory listings parameter must be disabled. | DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1 | Unix | CONFIGURATION MANAGEMENT |
| VCWN-65-000010 - The vCenter Server for Windows must limit the use of the built-in SSO administrative account. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCWN-65-000012 - The vCenter Server for Windows must disable the distributed virtual switch health check. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000016 - The vCenter Server for Windows must only send NetFlow traffic to authorized collectors. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000024 - The vCenter Server for Windows must configure the vpxuser password meets length policy. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000027 - The vCenter Server for Windows must minimize access to the vCenter server. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000028 - The vCenter Server for Windows Administrators must clean up log files after failed installations. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000031 - The vCenter Server for Windows must restrict the connectivity between Update Manager and public patch repositories by use of a separate Update Manager Download Server. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000032 - The vCenter Server for Windows must use a least-privileges assignment for the Update Manager database user. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000034 - The vCenter Server for Windows must use unique service accounts when applications connect to vCenter. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000039 - The vCenter Server for Windows passwords must be at least 15 characters in length. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCWN-65-000041 - The vCenter Server for Windows passwords must contain at least one lowercase character. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCWN-65-000042 - The vCenter Server for Windows passwords must contain at least one numeric character. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCWN-65-000043 - The vCenter Server for Windows passwords must contain at least one special character. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCWN-65-000051 - The vCenter Server for Windows users must have the correct roles assigned. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCWN-65-000058 - The vCenter Server for Windows reverse proxy must use DoD approved certificates. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000063 - The vCenter Server for Windows must restrict access to cryptographic role. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000065 - The vCenter Server for Windows must have Mutual CHAP configured for vSAN iSCSI targets. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| vNetwork : verify-dvfilter-bind | VMWare vSphere 6.5 Hardening Guide | VMware | ACCESS CONTROL |
