| ESXI-70-000004 - Remote logging for ESXi hosts must be configured. | DISA VMware vSphere 7.0 ESXi STIG v1r4 VMware | VMware | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| ESXI-70-000005 - The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user. | DISA VMware vSphere 7.0 ESXi STIG v1r4 VMware | VMware | ACCESS CONTROL |
| ESXI-70-000032 - The ESXi host must prohibit the reuse of passwords within five iterations. | DISA VMware vSphere 7.0 ESXi STIG v1r4 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXI-70-000060 - All port groups on standard switches must be configured to reject guest Media Access Control (MAC) address changes. | DISA VMware vSphere 7.0 ESXi STIG v1r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-70-000081 - The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities. | DISA VMware vSphere 7.0 ESXi STIG v1r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-70-000091 - The ESXi host must be configured with an appropriate maximum password age. | DISA VMware vSphere 7.0 ESXi STIG v1r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000005 - The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | ACCESS CONTROL |
| ESXI-80-000008 - The ESXi host must enable lockdown mode. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | ACCESS CONTROL |
| ESXI-80-000010 - The ESXi host client must be configured with an idle session timeout. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | ACCESS CONTROL |
| ESXI-80-000047 - The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB). | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000049 - The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| ESXI-80-000068 - The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXI-80-000114 - The ESXi host must offload logs via syslog. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| ESXI-80-000124 - The ESXi host must synchronize internal information system clocks to an authoritative time source. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| ESXI-80-000145 - The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXI-80-000160 - The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXI-80-000193 - The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH). | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| ESXI-80-000195 - The ESXi host must automatically stop shell services after 10 minutes. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXI-80-000198 - The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXI-80-000219 - The ESXi host must restrict use of the dvFilter network application programming interface (API). | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000223 - The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000227 - The ESXi host must be configured with an appropriate maximum password age. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000232 - The ESXi host must enable audit logging. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000234 - The ESXi host must enable strict x509 verification for SSL syslog endpoints. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000235 - The ESXi host must forward audit records containing information to establish what type of events occurred. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| ESXI-80-000240 - The ESXi host when using Host Profiles and/or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000246 - The ESXi host must not enable log filtering. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000250 - The ESXi host must disable virtual hardware management network interfaces. | DISA VMware vSphere 8.0 ESXi STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000009 - The vCenter Server must use DOD-approved encryption to protect the confidentiality of network sessions. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| VCSA-80-000057 - vCenter Server plugins must be verified. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000069 - The vCenter Server passwords must be at least 15 characters in length. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCSA-80-000070 - The vCenter Server must prohibit password reuse for a minimum of five generations. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCSA-80-000079 - The vCenter Server must enforce a 90-day maximum password lifetime restriction. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCSA-80-000123 - The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | ACCESS CONTROL |
| VCSA-80-000148 - The vCenter Server must be configured to send logs to a central log server. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| VCSA-80-000150 - The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT |
| VCSA-80-000253 - The vCenter server must enforce SNMPv3 security features where SNMP is required. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCSA-80-000267 - The vCenter Server must disable the distributed virtual switch health check. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000273 - The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000275 - The vCenter Server must configure the "vpxuser" auto-password to be changed every 30 days. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000276 - The vCenter Server must configure the "vpxuser" password to meet length policy. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000278 - The vCenter Server must use unique service accounts when applications connect to vCenter. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000285 - The vCenter Server must restrict access to cryptographic permissions. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000292 - The vCenter server configuration must be backed up on a regular basis. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000296 - The vCenter server must enable the OVF security policy for content libraries. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000300 - The vCenter Server must remove unauthorized port mirroring sessions on distributed switches. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000301 - The vCenter Server must not override port group settings at the port level on distributed switches. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000302 - The vCenter Server must reset port configuration when virtual machines are disconnected. | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000305 - The vCenter Server must disable accounts used for Integrated Windows Authentication (IWA). | DISA VMware vSphere 8.0 vCenter STIG v2r4 VMware | VMware | CONFIGURATION MANAGEMENT |
| VM Tools: guest-8.tools-prevent-recustomization | VMware vSphere Security Configuration and Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
