Item Search

NameAudit NamePluginCategory
1.9 Host hardware must enable AMD SEV-ES, if availableCIS VMware ESXi 8.0 v1.4.0 L2 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

1.9 Host hardware must enable AMD SEV-ES, if availableCIS VMware ESXi 9.0 v1.0.0 L2 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

2.1 Host must run software that has not reached End of General Support statusCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

SYSTEM AND SERVICES ACQUISITION

2.4 Ensure default self-signed certificate for ESXi communication is not usedCIS VMware ESXi 6.7 v1.3.0 Level 2 Bare MetalUnix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

2.8 When adding ESXi hosts to Active Directory use the vSphere Authentication Proxy to protect passwordsCIS VMware ESXi 5.1 v1.0.1 Level 1VMware
4.11 Install verified packages onlyCIS Docker 1.12.0 v1.0.0 L2 DockerUnix

CONFIGURATION MANAGEMENT

5.10 Ensure DCUI has a trusted users list for lockdown modeCIS VMware ESXi 6.7 v1.3.0 Level 1VMware

ACCESS CONTROL

5.10 Set DCUI.Access to allow trusted users to override lockdown modeCIS VMware ESXi 6.5 v1.0.0 Level 1VMware

IDENTIFICATION AND AUTHENTICATION

DISA_STIG_McAfee_VSEL_1.9.x_2.0.x_Managed_Client_v1r5.audit from DISA McAfee VSEL 1.9/2.0 Managed Client v1r5 STIGMcAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix
DISA_STIG_Microsoft_Project_2016_v1r1.audit for Microsoft Project 2016, from DISA STIG Microsoft Project 2016 v1r1DISA STIG Microsoft Project 2016 v1r1Windows
DISA_STIG_Microsoft_Windows_2012_Server_DNS_v2r7.audit from DISA Microsoft Windows 2012 Server Domain Name System v2r7 STIGDISA Microsoft Windows 2012 Server Domain Name System STIG v2r7Windows
DISA_STIG_Server_2012_and_2012_R2_DC_v3r7.audit from DISA Microsoft Windows Server 2012/2012 R2 Domain Controller v3r7 STIGDISA Windows Server 2012 and 2012 R2 DC STIG v3r7Windows
DISA_STIG_Splunk_Enterprise_7.x_for_Windows_REST_API_v3r2.audit from DISA Splunk Enterprise 7.x for Windows v3r2 STIGDISA STIG Splunk Enterprise 7.x for Windows v3r2 REST APISplunk
DISA_STIG_Splunk_Enterprise_8.x_for_Linux_REST_API_v2r3.audit from DISA Splunk Enterprise 8.x for Linux v2r3 STIGDISA STIG Splunk Enterprise 8.x for Linux v2r3 STIG REST APISplunk
ESXi: esxi-8.lockdown-modeVMware vSphere Security Configuration and Hardening GuideVMware

ACCESS CONTROL

vCenter : block-unused-portsVMWare vSphere 5.X Hardening GuideVMware
vCenter : limit-user-loginVMWare vSphere 5.X Hardening GuideVMware
vCenter: vcenter-8.administration-failed-login-intervalVMware vSphere Security Configuration and Hardening GuideVMware

ACCESS CONTROL

vCenter: vcenter-8.administration-sso-password-lifetimeVMware vSphere Security Configuration and Hardening GuideVMware

IDENTIFICATION AND AUTHENTICATION

vCenter: vcenter-8.logs-level-globalVMware vSphere Security Configuration and Hardening GuideVMware

AUDIT AND ACCOUNTABILITY

vCenter: vcenter-8.network-mac-learningVMware vSphere Security Configuration and Hardening GuideVMware

CONFIGURATION MANAGEMENT

vCenter: vcenter-8.network-reset-portVMware vSphere Security Configuration and Hardening GuideVMware

CONFIGURATION MANAGEMENT

vCenter: vcenter-8.vami-administration-password-expirationVMware vSphere Security Configuration and Hardening GuideVMware

CONFIGURATION MANAGEMENT

vCenter: vcenter-8.vami-firewall-restrict-accessVMware vSphere Security Configuration and Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-autoinstallVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-console-copyVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-console-dndVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-console-gui-optionsVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-console-pasteVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-disk-shrinking-shrinkVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-disk-shrinking-wiperVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-hgfsVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-independent-nonpersistentVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-intervm-vmciVMWare vSphere 5.X Hardening GuideVMware

SYSTEM AND COMMUNICATIONS PROTECTION

VM : disable-loggingVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disable-monitor-controlVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disconnect-devices-floppyVMWare vSphere 5.X Hardening GuideVMware

MEDIA PROTECTION

VM : disconnect-devices-ideVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disconnect-devices-parallelVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disconnect-devices-serialVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : disconnect-devices-usbVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : limit-console-connections-oneVMWare vSphere 5.X Hardening GuideVMware

ACCESS CONTROL

VM : limit-log-numberVMWare vSphere 5.X Hardening GuideVMware

AUDIT AND ACCOUNTABILITY

VM : limit-log-sizeVMWare vSphere 5.X Hardening GuideVMware

AUDIT AND ACCOUNTABILITY

VM : prevent-device-interaction-connectVMWare vSphere 5.X Hardening GuideVMware

ACCESS CONTROL

VM : prevent-device-interaction-editVMWare vSphere 5.X Hardening GuideVMware

ACCESS CONTROL

VM : restrict-host-infoVMWare vSphere 5.X Hardening GuideVMware

SYSTEM AND COMMUNICATIONS PROTECTION

VM : use-vm-templatesVMWare vSphere 5.X Hardening GuideVMware

CONFIGURATION MANAGEMENT

VM : verify-network-filterVMWare vSphere 5.X Hardening GuideVMware

ACCESS CONTROL

VM : verify-vmsafe-cpumem-enableVMWare vSphere 5.X Hardening GuideVMware

SYSTEM AND INFORMATION INTEGRITY