| 7.15 Ensure TLS Cipher Suite ordering is configured | CIS IIS 7 L2 v1.8.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'CIM Secure Server allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'CIM SLP allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'DHCP Client allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'DNS Client allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'DVSSync blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'gdbserver blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'Software iSCSI Client blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'SSH Server allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'vCenter Update Manager blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'VM serial port connected over network blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'vSphere Web Access allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-persistent-logs | VMWare vSphere 5.X Hardening Guide | VMware | AUDIT AND ACCOUNTABILITY |
| ESXi : disable-ssh | VMWare vSphere 5.X Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| ESXi : enable-auth-proxy | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : enable-chap-auth | VMWare vSphere 5.X Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : enable-host-profiles | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : enable-nfc-ssl | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : enable-remote-dump | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : set-password-complexity | VMWare vSphere 5.X Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : set-shell-interactive-timeout | VMWare vSphere 5.X Hardening Guide | VMware | ACCESS CONTROL |
| ESXi : set-shell-timeout | VMWare vSphere 5.X Hardening Guide | VMware | ACCESS CONTROL |
| SQL6-D0-004300 - SQL Server must be configured to generate audit records for DoD-defined auditable events within all DBMS/database components. | DISA MS SQL Server 2016 Instance STIG v3r6 MS_SQLDB | MS_SQLDB | AUDIT AND ACCOUNTABILITY |
| SSO : check-SSO-Password-policy | VMWare vSphere 5.X Hardening Guide | VMware | |
| SSO : restrict-sso-db-user | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : no-self-signed-certs | VMWare vSphere 5.X Hardening Guide | VMware | |
| VM : control-resource-usage | VMWare vSphere 5.X Hardening Guide | VMware | |
| VM : disable-unnecessary-functions | VMWare vSphere 5.X Hardening Guide | VMware | |
| VM : minimize-console-use | VMWare vSphere 5.X Hardening Guide | VMware | |
| VM : minimize-console-VNC-use | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : disable-dvportgroup-autoexpand | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : document-vlans | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : document-vlans-vds | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : enable-portfast | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : isolate-storage-network-vlan | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : label-vswitches | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : no-native-vlan-1 | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : no-vgt-vlan-4095 | VMWare vSphere 5.X Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| vNetwork : reject-mac-change-dvportgroup | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : reject-mac-changes - 'PortGroup' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : reject-mac-changes - 'vSwitch' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : reject-promiscuous-mode - 'PortGroup' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : reject-promiscuous-mode - 'vSwitch' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : reject-promiscuous-mode-dvportgroup | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : restrict-port-level-overrides | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : set-non-negotiate | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : audit-vum-login | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : isolate-vum-webserver | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : no-vum-self-signed-certs | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : restrict-vum-db-user | VMWare vSphere 5.X Hardening Guide | VMware | |
