| 2.2 Configure the ESXi host firewall to restrict access to services running on the host | CIS VMware ESXi 5.5 v1.2.0 Level 1 | VMware | ACCESS CONTROL |
| 2.11 Host must use sufficient entropy for cryptographic operations | CIS VMware ESXi 9.0 v1.0.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 2.11 Host must use sufficient entropy for cryptographic operations | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 5.4.7 Ensure minimum and maximum requirements are set for password changes - difok | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.7 Ensure minimum and maximum requirements are set for password changes - maxclassrepeat | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.7 Ensure minimum and maximum requirements are set for password changes - minclass | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.7 Ensure minimum and maximum requirements are set for password changes - minlen | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | IDENTIFICATION AND AUTHENTICATION |
| 7.2 Set Strong Password Creation Policies | CIS Oracle Solaris 11.4 L1 v1.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 7.2 Set Strong Password Creation Policies - DICTIONLIST = /usr/share/lib/dict/words | CIS Solaris 11.2 L1 v1.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 7.2 Set Strong Password Creation Policies - MINUPPER = 1 | CIS Solaris 11.1 L1 v1.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 8.7.1 Ensure VIX messages from the VM are disabled | CIS VMware ESXi 6.7 v1.3.0 Level 2 | VMware | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| ALMA-09-018830 - AlmaLinux OS 9 firewall must employ a deny-all, allow-by-exception policy for allowing connections to other systems. | DISA Cloud Linux AlmaLinux OS 9 STIG v1r7 | Unix | CONFIGURATION MANAGEMENT |
| ESXi : config-firewall-access - 'DHCPv6 blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'Fault Tolerance blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'FTP Client blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'NTP Client blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'SNMP Server allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'syslog blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'VM serial port connected to vSPC blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'vMotion allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'vSphere High Availability Agent blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'WOL allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-ntp | VMWare vSphere 5.X Hardening Guide | VMware | AUDIT AND ACCOUNTABILITY |
| ESXi : config-snmp - 'snmp.receiver.X.community' | VMWare vSphere 5.X Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : disable-mob | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : enable-remote-syslog | VMWare vSphere 5.X Hardening Guide | VMware | AUDIT AND ACCOUNTABILITY |
| ESXi : remove-revoked-certificates | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : verify-dvfilter-bind | VMWare vSphere 5.X Hardening Guide | VMware | ACCESS CONTROL |
| ESXi : vmdk-zero-out | VMWare vSphere 5.X Hardening Guide | VMware | |
| GEN005300-ESXI5-000099 - SNMP communities, users, and passphrases must be changed from the default. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| JBOS-AS-000080 - The JBoss server must generate log records for access and authentication events to the management interface. | DISA JBoss Enterprise Application Platform 6.3 STIG v2r6 | Unix | AUDIT AND ACCOUNTABILITY |
| SRG-OS-99999-ESXI5-000132 - Persistent logging for all ESXi hosts must be configured. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | AUDIT AND ACCOUNTABILITY |
| SRG-OS-99999-ESXI5-000147 - The system must ensure uniqueness of CHAP authentication secrets. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| SSO : check-SSO-Password-expiration | VMWare vSphere 5.X Hardening Guide | VMware | |
| SSO : SSO-DB-password-recorded | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : change-default-password | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : config-ntp | VMWare vSphere 5.X Hardening Guide | VMware | AUDIT AND ACCOUNTABILITY |
| vCenter : restrict-guest-control | VMWare vSphere 5.X Hardening Guide | VMware | |
| VM : use-secure-serial-communication | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : document-pvlans | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : enable-bpdu-filter | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : isolate-vmotion-network-airgap | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : isolate-vmotion-network-vlan | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : no-reserved-vlans | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : no-unused-dvports | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : restrict-netflow-usage | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : upstream-bpdu-stp | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : isolate-vum-proxy | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : patch-vum-os | VMWare vSphere 5.X Hardening Guide | VMware | |
| WG400 A22 - All interactive programs (CGI) must be placed in a designated directory with appropriate permissions. | DISA STIG Apache Site 2.2 Unix v1r11 | Unix | ACCESS CONTROL |
