| ESXi : Audit-SSH-Disable | VMWare vSphere 6.5 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| ESXi : config-snmp - 'snmp.receiver.X.community' | VMWare vSphere 6.0 Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : config-snmp - 'snmp.receiver.X.enabled | VMWare vSphere 6.0 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| ESXi : disable-mob | VMWare vSphere 6.0 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| ESXi : enable-ad-auth | VMWare vSphere 6.5 Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : enable-auth-proxy | VMWare vSphere 6.5 Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : enable-chap-auth | VMWare vSphere 6.0 Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : enable-strict-lockdown-mode | VMWare vSphere 6.5 Hardening Guide | VMware | ACCESS CONTROL |
| ESXi : set-password-policies | VMWare vSphere 6.0 Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : set-shell-interactive-timeout | VMWare vSphere 6.5 Hardening Guide | VMware | ACCESS CONTROL |
| ESXi : set-shell-timeout | VMWare vSphere 6.0 Hardening Guide | VMware | ACCESS CONTROL |
| ESXi : TransparentPageSharing-intra-enabled | VMWare vSphere 6.0 Hardening Guide | VMware | SYSTEM AND INFORMATION INTEGRITY |
| ESXI-80-000111 - The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | ACCESS CONTROL |
| ESXI-80-000114 - The ESXi host must offload logs via syslog. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| ESXI-80-000199 - The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXI-80-000215 - The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000220 - The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000228 - The ESXi Common Information Model (CIM) service must be disabled. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000233 - The ESXi host must off-load audit records via syslog. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| ESXI-80-000240 - The ESXi host when using Host Profiles and/or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000246 - The ESXi host must not enable log filtering. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXi.Disable-oldtls-protocols | VMWare vSphere 6.5 Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCEM-70-000006 - ESX Agent Manager must generate log records for system startup and shutdown. | DISA STIG VMware vSphere 7.0 EAM Tomcat v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| VCLU-70-000006 - Lookup Service must generate log records for system startup and shutdown. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| VCSA-70-000291 - The vCenter Server must limit membership to the 'TrustedAdmins' Single Sign-On (SSO) group. | DISA STIG VMware vSphere 7.0 vCenter v1r3 | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000080 - The vCenter Server must enable revocation checking for certificate-based authentication. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCSA-80-000158 - The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| VCSA-80-000265 - The vCenter server must disable SNMPv1/2 receivers. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCSA-80-000266 - The vCenter Server must require an administrator to unlock an account locked due to excessive login failures. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | ACCESS CONTROL |
| VCSA-80-000269 - The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to "Reject". | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000272 - The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN). | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000281 - The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000286 - The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000294 - The vCenter server Native Key Provider must be backed up with a strong password. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000295 - The vCenter server must require authentication for published content libraries. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000303 - The vCenter Server must disable Secure Shell (SSH) access. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VM : disable-console-copy | VMWare vSphere 6.5 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| VM : disable-console-paste | VMWare vSphere 6.0 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| VM : disable-disk-shrinking-shrink | VMWare vSphere 6.0 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| VM : disable-non-essential-3D-features | VMWare vSphere 6.5 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| VM : disable-VMtools-autoinstall | VMWare vSphere 6.0 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| VM : disconnect-devices-floppy | VMWare vSphere 6.0 Hardening Guide | VMware | MEDIA PROTECTION |
| VM : limit-setinfo-size | VMWare vSphere 6.0 Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| VM : prevent-device-interaction-edit | VMWare vSphere 6.0 Hardening Guide | VMware | ACCESS CONTROL |
| VM : restrict-host-info | VMWare vSphere 6.0 Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| VM : TransparentPageSharing-inter-VM-Enabled | VMWare vSphere 6.5 Hardening Guide | VMware | SYSTEM AND INFORMATION INTEGRITY |
| vNetwork : enable-bpdu-filter | VMWare vSphere 6.0 Hardening Guide | VMware | |
| vNetwork : reject-forged-transmit - 'PortGroup' | VMWare vSphere 6.0 Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : restrict-netflow-usage | VMWare vSphere 6.0 Hardening Guide | VMware | |
| vNetwork : verify-dvfilter-bind | VMWare vSphere 6.0 Hardening Guide | VMware | ACCESS CONTROL |
