| 3.1 Configure a centralized location to collect ESXi host core dumps | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | |
| DISA_Oracle_11g_Installation_v9r1_OS_Linux.audit from DISA Oracle Database 11g Installation STIG v9r1 STIG | DISA STIG Oracle 11 Installation v9r1 Linux | Unix | |
| DISA_Oracle_11g_Instance_v9r1_OS_Linux.audit from DISA Oracle Database 11g Instance STIG v9r1 STIG | DISA STIG Oracle 11 Instance v9r1 OS Unix | Unix | |
| ESXi : enable-strict-lockdown-mode | VMWare vSphere 6.0 Hardening Guide | VMware | ACCESS CONTROL |
| ESXi : enable-strict-lockdown-mode | VMWare vSphere 6.5 Hardening Guide | VMware | ACCESS CONTROL |
| ESXI-67-000074 - The ESXi host must exclusively enable TLS 1.2 for all endpoints. | DISA STIG VMware vSphere 6.7 ESXi v1r3 | VMware | CONFIGURATION MANAGEMENT |
| ESXI5-VMNET-000005 - All vSwitch and VLAN IDs must be fully documented - 'vSwitch labels' | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| ESXI5-VMNET-000014 - The system must ensure that the dvPortgroup Forged Transmits policy is set to reject. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXI5-VMNET-000018 - The system must ensure the virtual switch Promiscuous Mode policy is set to reject. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXI5-VMNET-000020 - The system must ensure there are no unused ports on a distributed virtual port group. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| GEN000585-ESXI5-000080 - The system must enforce the entire password during authentication. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| PHTN-40-000003 - The Photon operating system must audit all account creations. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| PHTN-40-000013 - The Photon operating system must have the OpenSSL FIPS provider installed to protect the confidentiality of remote access sessions. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| PHTN-40-000030 - The Photon operating system must allow only authorized users to configure the auditd service. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000044 - The Photon operating system must enforce a minimum 15-character password length. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| PHTN-40-000067 - The Photon operating system must restrict access to the kernel message buffer. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| PHTN-40-000078 - The Photon operating system must audit all account removal actions. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000092 - The Photon operating system must use cryptographic mechanisms to protect the integrity of audit tools. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000105 - The Photon operating system must enable symlink access control protection in the kernel. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000160 - The Photon operating system must implement address space layout randomization to protect its memory from unauthorized code execution. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| PHTN-40-000173 - The Photon operating system must generate audit records when successful/unsuccessful logon attempts occur. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000175 - The Photon operating system must be configured to audit the loading and unloading of dynamic kernel modules. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000192 - The Photon operating system must be configured to use the pam_faillock.so module. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000196 - The Photon operating system must persist lockouts between system reboots. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000207 - The Photon operating system must configure Secure Shell (SSH) to disallow authentication with an empty password. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000215 - The Photon operating system must configure Secure Shell (SSH) to disallow compression of the encrypted session stream. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000218 - The Photon operating system must configure Secure Shell (SSH) to ignore user-specific known_host files. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000234 - The Photon operating system must be configured to protect the Secure Shell (SSH) private host key from unauthorized access. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000236 - The Photon operating system must disable systemd fallback DNS. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000237 - The Photon operating system must configure AIDE to detect changes to baseline configurations. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000243 - The Photon operating system must be configured to use the pam_pwhistory.so module. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| SRG-OS-000104-ESXI5 - All accounts must be assigned unique User Identification Numbers (UIDs) - UIDs | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | IDENTIFICATION AND AUTHENTICATION |
| SRG-OS-000121-ESXI5 - All accounts on the system must have unique user or account names. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| SRG-OS-99999-ESXI5-000155 - Active Directory ESX Admin group membership must be verified unused. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | ACCESS CONTROL |
| VCEM-67-000027 - Rsyslog must be configured to monitor and ship ESX Agent Manager log files - localhost | DISA STIG VMware vSphere 6.7 EAM Tomcat v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| vCenter : restrict-datastore-web | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : thick-client-timeout | VMWare vSphere 5.X Hardening Guide | VMware | |
| VCENTER-000003 - The VMware Update Manager must not be configured to manage its own VM or the VM of its vCenter Server. | DISA STIG VMWare ESXi vCenter 5 STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| VCENTER-000020 - The system must restrict unauthorized vSphere users from being able to execute commands within the guest virtual machine. | DISA STIG VMWare ESXi vCenter 5 STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| VCLD-80-000031 - The vCenter VAMI service must explicitly disable Multipurpose Internet Mail Extensions (MIME) mime mappings based on "Content-Type". | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLD-80-000060 - The vCenter VAMI service must restrict the ability of users to launch denial-of-service (DoS) attacks against other information systems or networks. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-67-000005 - vSphere UI must record user access in a format that enables monitoring of remote access. | DISA STIG VMware vSphere 6.7 UI Tomcat v1r3 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| VCUI-67-000013 - vSphere UI must not have the Web Distributed Authoring (WebDAV) servlet installed. | DISA STIG VMware vSphere 6.7 UI Tomcat v1r3 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-67-000020 - vSphere UI must set the welcome-file node to a default web page. | DISA STIG VMware vSphere 6.7 UI Tomcat v1r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-67-000030 - vSphere UI must set the secure flag for cookies. | DISA STIG VMware vSphere 6.7 UI Tomcat v1r3 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-80-000127 - The vCenter UI service must configure the "setCharacterEncodingFilter" filter. | DISA VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v2r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-80-000136 - The vCenter UI service debug parameter must be disabled. | DISA VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| vNetwork : restrict-mgmt-network-access-gateway | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : restrict-mgmt-network-access-jumpbox | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : secure-vum-os | VMWare vSphere 5.X Hardening Guide | VMware | |
