| 1.30 ESXI-80-000198 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II VMware | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.2 Disable ESXi Shell unless needed for diagnostics or troubleshooting | CIS VMware ESXi 5.5 v1.2.0 Level 1 | VMware | CONFIGURATION MANAGEMENT |
| 8.6 VMware Tools must limit the automatic removal of features | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, MAINTENANCE |
| VCLU-80-000001 - The vCenter Lookup service must limit the number of maximum concurrent connections permitted. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| VCLU-80-000005 - The vCenter Lookup service cookies must have secure flag set. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | ACCESS CONTROL |
| VCLU-80-000034 - The vCenter Lookup service must limit privileges for creating or modifying hosted application shared files. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000037 - The vCenter Lookup service must be configured to use a specified IP address and port. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000057 - The vCenter Lookup service must be configured to limit data exposure between applications. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCLU-80-000067 - The vCenter Lookup service "ErrorReportValve showServerInfo" must be set to "false". | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCLU-80-000124 - The vCenter Lookup service must enable "STRICT_SERVLET_COMPLIANCE". | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000125 - The vCenter Lookup service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | ACCESS CONTROL |
| VCLU-80-000126 - The vCenter Lookup service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | ACCESS CONTROL |
| VCLU-80-000127 - The vCenter Lookup service must configure the "setCharacterEncodingFilter" filter. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCLU-80-000129 - The vCenter Lookup service cookies must have "http-only" flag set. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | ACCESS CONTROL |
| VCLU-80-000130 - The vCenter Lookup service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | ACCESS CONTROL |
| VCLU-80-000134 - The vCenter Lookup service shutdown port must be disabled. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000136 - The vCenter Lookup service debug parameter must be disabled. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000137 - The vCenter Lookup service directory listings parameter must be disabled. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000139 - The vCenter Lookup service must have Autodeploy disabled. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000152 - The vCenter Lookup service must enable "ENFORCE_ENCODING_IN_GET_WRITER". | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-80-000155 - The vCenter Lookup service host-manager webapp must be removed. | DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCWN-65-000001 - The vCenter Server for Windows must prohibit password reuse for a minimum of five generations. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCWN-65-000003 - The vCenter Server for Windows must enforce a 60-day maximum password lifetime restriction. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCWN-65-000007 - The vCenter Server for Windows must manage excess capacity, bandwidth, or other redundancy to limit the effects of information-flooding types of Denial of Service (DoS) attacks by enabling Network I/O Control (NIOC). | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000008 - The vCenter Server for Windows must provide an immediate real-time alert to the SA and ISSO, at a minimum, of all audit failure events. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | AUDIT AND ACCOUNTABILITY |
| VCWN-65-000015 - The vCenter Server for Windows must set the distributed port group Promiscuous Mode policy to reject. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000017 - The vCenter Server for Windows must not override port group settings at the port level on distributed switches. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000018 - The vCenter Server for Windows must configure all port groups to a value other than that of the native VLAN. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000019 - The vCenter Server for Windows must configure all port groups to VLAN 4095 unless Virtual Guest Tagging (VGT) is required. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000020 - The vCenter Server for Windows must not configure all port groups to VLAN values reserved by upstream physical switches. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000026 - The vCenter Server for Windows must check the privilege re-assignment after restarts. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000030 - The vCenter Server for Windows Administrator role must be secured and assigned to specific users other than a Windows Administrator. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000036 - The vCenter Server for Windows must produce audit records containing information to establish what type of events occurred. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | SYSTEM AND INFORMATION INTEGRITY |
| VCWN-65-000040 - The vCenter Server for Windows passwords must contain at least one uppercase character. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCWN-65-000045 - The vCenter Server for Windows must limit the maximum number of failed login attempts to three. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | ACCESS CONTROL |
| VCWN-65-000046 - The vCenter Server for Windows must set the interval for counting failed login attempts to at least 15 minutes. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | ACCESS CONTROL |
| VCWN-65-000047 - The vCenter Server for Windows must require an administrator to unlock an account locked due to excessive login failures. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | ACCESS CONTROL |
| VCWN-65-000048 - The vCenter Server for Windows must alert administrators on permission creation operations. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | SYSTEM AND INFORMATION INTEGRITY |
| VCWN-65-000049 - The vCenter Server for Windows must alert administrators on permission deletion operations. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | SYSTEM AND INFORMATION INTEGRITY |
| VCWN-65-000050 - The vCenter Server for Windows must alert administrators on permission update operations. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | SYSTEM AND INFORMATION INTEGRITY |
| VCWN-65-000052 - The vCenter Server for Windows must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000053 - The vCenter Server for Windows must enable the vSAN Health Check. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000055 - The vCenter Server for Windows must configure the vSAN Datastore name to a unique name. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000059 - The vCenter Server for Windows must enable certificate based authentication. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000060 - The vCenter Server for Windows must enable revocation checking for certificate based authentication. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000062 - The vCenter Server for Windows must enable Login banner for vSphere web client. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000064 - The vCenter Server for Windows must restrict access to cryptographic permissions. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000066 - The vCenter Server for Windows must have new Key Encryption Keys (KEKs) re-issued at regular intervals for vSAN encrypted datastore(s). | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000067 - The vCenter Server for Windows must disable the Customer Experience Improvement Program (CEIP). | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000068 - The vCenter Server for Windows must use LDAPS when adding an SSO identity source. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
