| 2.6 Host must have reliable time synchronization sources | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 2.8 Host must require TPM-based configuration encryption | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.9 Host must not suppress warnings about unmitigated hyperthreading vulnerabilities | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 3.1 Host should deactivate SSH | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 3.9 Host must automatically deactivate shell services | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL |
| 3.11 Host must enforce password complexity | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| 3.13 Host must unlock accounts after a specified timeout period | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL |
| 3.15 Host must be configured with an appropriate maximum password age | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| 3.18 Host must have an accurate DCUI.Access list | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| 3.22 Host must deny shell access for the dcui account | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| 4.2 Host must transmit system logs to a remote log collector | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 4.4 Host must set the logging informational level to info | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | AUDIT AND ACCOUNTABILITY |
| 4.6 Host must enable audit record logging | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | AUDIT AND ACCOUNTABILITY |
| 4.8 Host must store one week of audit records | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | AUDIT AND ACCOUNTABILITY |
| 4.9 Host must transmit audit records to a remote log collector | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 5.2 Host must block network traffic by default | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| 5.3 Host must restrict use of the dvFilter network API | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.9 Host must restrict access to a default or native VLAN on standard virtual switches | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.10 Host must restrict the use of Virtual Guest Tagging (VGT) on standard virtual switches | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.2.1 Host must isolate storage communications | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.2.2 Host must ensure all datastores have unique names | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.3.1 Host iSCSI client, if enabled, must employ bidirectional/mutual CHAP authentication | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.3.2 Host iSCSI client, if enabled, must employ unique CHAP authentication secrets | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| 6.5.2 Host SSH daemon, if enabled, must use FIPS 140-2/140-3 validated cryptographic modules | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.5.4 Host SSH daemon, if enabled, must not allow host-based authentication | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 6.5.9 Host SSH daemon, if enabled, must disable stream local forwarding | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 6.5.10 Host SSH daemon, if enabled, must disable TCP forwarding | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 6.5.11 Host SSH daemon, if enabled, must not permit tunnels | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 7.3 Virtual machines must require encryption for Fault Tolerance | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.7 Virtual machines must limit PCI/PCIe device passthrough functionality | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.8 Ensure unauthorized modification and disconnection of devices is disabled | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.9 Virtual machines must prevent unauthorized connection of devices | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.14 Virtual machines must remove unnecessary parallel port devices | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.17 Virtual machines must deactivate console drag and drop operations | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.18 Virtual machines must deactivate console copy operations | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.19 Virtual machines must deactivate console paste operations | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 7.25 Virtual machines must enable diagnostic logging | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | AUDIT AND ACCOUNTABILITY |
| 7.26 Virtual machines must limit the number of retained diagnostic logs | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 7.27 Virtual machines must limit the size of diagnostic logs | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 7.28 Virtual machines must limit informational messages from the virtual machine to the VMX file | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 8.1 VMware Tools must be a version that has not reached End of General Support status | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | SYSTEM AND SERVICES ACQUISITION |
| 8.2 VMware Tools must have all software updates installed | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 8.7 VMware Tools must deactivate GlobalConf unless required | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 8.13 VMware Tools must enable VMware Tools logging | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 8.14 VMware Tools must send VMware Tools logs to the system log service | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 18.10.5.1 (L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Windows Server 2012 R2 DC L1 v3.0.0 | Windows | ACCESS CONTROL |
| 18.10.5.1 (L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Windows Server 2012 R2 MS L1 v3.0.0 | Windows | ACCESS CONTROL |
| O19C-00-009300 - The Oracle SQL92_SECURITY parameter must be set to TRUE. | DISA Oracle Database 19c STIG v1r3 OracleDB | OracleDB | CONFIGURATION MANAGEMENT |
| SQL4-00-031100 - SQL Server must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations. | DISA STIG SQL Server 2014 Instance OS Audit v2r4 | Windows | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| SQL6-D0-008700 - SQL Server must use NIST FIPS 140-2/140-3-validated cryptographic operations for encryption, hashing, and signing. | DISA MS SQL Server 2016 Instance STIG v3r6 Windows | Windows | IDENTIFICATION AND AUTHENTICATION |
