| 1.4 Ensure that the Forged Transmits policy is set to reject | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5 ESXI-80-000014 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT I Unix | Unix | ACCESS CONTROL |
| 1.11 ESXI-80-000052 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.13 ESXI-80-000085 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY |
| 1.22 ESXI-80-000187 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.23 VMCH-80-000212 | CIS VMware vSphere 8.0 Virtual Machine STIG v1.0.0 CAT II | VMware | CONFIGURATION MANAGEMENT |
| 1.25 ESXI-80-000192 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | ACCESS CONTROL |
| 1.33 ESXI-80-000202 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.34 ESXI-80-000204 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.35 ESXI-80-000207 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT III Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.36 ESXI-80-000209 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.37 ESXI-80-000210 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT III Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.38 ESXI-80-000211 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT III Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.39 ESXI-80-000212 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.57 ESXI-80-000230 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.63 ESXI-80-000236 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.70 ESXI-80-000245 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.75 ESXI-80-000249 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.114 WN10-CC-000063 | CIS Microsoft Windows 10 STIG v1.0.0 CAT II | Windows | CONFIGURATION MANAGEMENT |
| 2.4 Do not use default self-signed certificates for ESXi communication | CIS VMware ESXi 5.5 v1.2.0 Level 1 | VMware | |
| 3.23 Host must deny shell access for the vpxuser account | CIS VMware ESXi 8.0 v1.4.0 L2 Unix | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| 4.5 Verify Active Directory group membership for the 'ESX Admins' group | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | ACCESS CONTROL |
| 6.1 Enable bidirectional CHAP authentication for iSCSI traffic | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | IDENTIFICATION AND AUTHENTICATION |
| 7.1.2 Ensure that the MAC Address Change policy is set to reject | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.1.5 Ensure that VDS Port Mirror traffic is only being sent to authorized collector ports or VLANs | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | |
| 7.24 Virtual machines must not be able to obtain host information from the hypervisor | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 7.24 Virtual machines must not be able to obtain host information from the hypervisor | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 7.29 Virtual machines should have virtual machine hardware version 19 or newer | CIS VMware ESXi 9.0 v1.0.0 L2 VMware | VMware | SYSTEM AND SERVICES ACQUISITION |
| 7.29 Virtual machines should have virtual machine hardware version 19 or newer | CIS VMware ESXi 8.0 v1.4.0 L2 VMware | VMware | SYSTEM AND SERVICES ACQUISITION |
| 8.2.8 Ensure PCI and PCIe device passthrough is disabled | CIS VMware ESXi 6.7 v1.3.0 Level 1 | VMware | CONFIGURATION MANAGEMENT |
| 8.3.3 Use secure protocols for virtual serial port access | CIS VMware ESXi 5.1 v1.0.1 Level 1 | VMware | |
| 8.7.3 Ensure host information is not sent to guests | CIS VMware ESXi 6.5 v1.0.0 Level 2 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.7.3 Ensure host information is not sent to guests | CIS VMware ESXi 6.7 v1.3.0 Level 2 | VMware | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 8.9 VMware Tools must deactivate Appinfo information gathering unless required | CIS VMware ESXi 8.0 v1.4.0 L2 VMware | VMware | CONFIGURATION MANAGEMENT |
| 8.9 VMware Tools must deactivate Appinfo information gathering unless required | CIS VMware ESXi 9.0 v1.0.0 L2 VMware | VMware | CONFIGURATION MANAGEMENT |
| APPNET0064 - .Net applications that invoke NetFx40_LegacySecurityPolicy must apply previous versions of .NET STIG guidance. | DISA Microsoft DotNet Framework 4.0 STIG v2r9 | Windows | CONFIGURATION MANAGEMENT |
| CIS VMware ESXi 5.5 v1.2.0 Level 1 | CIS VMware ESXi 5.5 v1.2.0 Level 1 | VMware | |
| CIS VMware ESXi 5.5 v1.2.0 Level 2 | CIS VMware ESXi 5.5 v1.2.0 Level 2 | VMware | |
| CIS VMware ESXi 6.5 v1.0.0 Level 2 | CIS VMware ESXi 6.5 v1.0.0 Level 2 | VMware | |
| F5BI-DM-300046 - The F5 BIG-IP appliance must be configured to use multifactor authentication (MFA) for interactive logins. | DISA F5 BIG-IP TMOS NDM STIG v1r2 | F5 | AUDIT AND ACCOUNTABILITY, IDENTIFICATION AND AUTHENTICATION |
| GEN005440-ESXI5-000078 - The system must not be used as a syslog server (log host) for systems external to the enclave - log host for systems external to the enclave | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | AUDIT AND ACCOUNTABILITY |
| GEN005460-ESXI5-000060 - The system must only use remote syslog servers (log hosts) justified and documented using site-defined procedures. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | AUDIT AND ACCOUNTABILITY |
| SRG-OS-99999-ESXI5-000138 - The system must disable SSH. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| SRG-OS-99999-ESXI5-000141 - The system must enable bidirectional CHAP authentication for iSCSI traffic. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | IDENTIFICATION AND AUTHENTICATION |
| SRG-OS-99999-ESXI5-000160 - The system must use the vSphere Authentication Proxy to protect passwords when adding ESXi hosts to Active Directory. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| vCenter : remove-expired-certificates | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : remove-revoked-certificates | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : restrict-network-access | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : use-service-accounts | VMWare vSphere 5.X Hardening Guide | VMware | |
| VCSA : restrict-network-access | VMWare vSphere 5.X Hardening Guide | VMware | |
