| ESXI-80-000202 - The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication. | DISA VMware vSphere 8.0 ESXi STIG v2r5 Unix | Unix | CONFIGURATION MANAGEMENT |
| ESXI-80-000212 - The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c. | DISA VMware vSphere 8.0 ESXi STIG v2r5 Unix | Unix | CONFIGURATION MANAGEMENT |
| ESXI-80-000213 - The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing. | DISA VMware vSphere 8.0 ESXi STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000244 - The ESXi host must enforce the exclusive running of executables from approved VIBs. | DISA VMware vSphere 8.0 ESXi STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| ESXI-80-000249 - The ESXi host must deny shell access for the dcui account. | DISA VMware vSphere 8.0 ESXi STIG v2r5 Unix | Unix | CONFIGURATION MANAGEMENT |
| MD8X-00-012200 - MongoDB must be configured in accordance with the security configuration settings based on DOD security configuration and implementation guidance, including STIGs, NSA configuration guides, CTOs, DTMs, and IAVMs. | DISA MongoDB Enterprise Advanced 8.x STIG v1r1 Unix | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000184 - The Photon operating system must prevent the use of dictionary words for passwords. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000186 - The Photon operating system must ensure audit events are flushed to disk at proper intervals. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000206 - The Photon operating system must enforce a delay of at least four seconds between logon prompts following a failed logon attempt. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000210 - The Photon operating system must disable the debug-shell service. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000216 - The Photon operating system must configure Secure Shell (SSH) to display the last login immediately after authentication. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000217 - The Photon operating system must configure Secure Shell (SSH) to ignore user-specific trusted hosts lists. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000221 - The Photon operating system must configure Secure Shell (SSH) to restrict LoginGraceTime. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000222 - The Photon operating system must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled on the command line. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000227 - The Photon operating system must not send IPv4 Internet Control Message Protocol (ICMP) redirects. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000229 - The Photon operating system must use a reverse-path filter for IPv4 network traffic. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000233 - The Photon operating system must be configured to protect the Secure Shell (SSH) public host key from unauthorized modification. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000235 - The Photon operating system must enforce password complexity on the root account. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000247 - The Photon operating system must not allow empty passwords. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLD-80-000097 - The vCenter VAMI service must disable client initiated TLS renegotiation. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLD-80-000098 - The vCenter VAMI service must be configured to hide the server type and version in client responses. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLD-80-000099 - The vCenter VAMI service must implement HTTP Strict Transport Security (HSTS). | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLD-80-000101 - The vCenter VAMI service must protect against MIME sniffing. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCLD-80-000102 - The vCenter VAMI service must enable Content Security Policy. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCPF-80-000151 - The vCenter Perfcharts service must disable "ALLOW_BACKSLASH". | DISA VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCSA-80-000275 - The vCenter Server must configure the "vpxuser" auto-password to be changed every 30 days. | DISA VMware vSphere 8.0 vCenter STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000276 - The vCenter Server must configure the "vpxuser" password to meet length policy. | DISA VMware vSphere 8.0 vCenter STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000279 - The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic. | DISA VMware vSphere 8.0 vCenter STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000286 - The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets. | DISA VMware vSphere 8.0 vCenter STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000287 - The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s). | DISA VMware vSphere 8.0 vCenter STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCSA-80-000295 - The vCenter server must require authentication for published content libraries. | DISA VMware vSphere 8.0 vCenter STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| VCST-80-000151 - The vCenter STS service must disable "ALLOW_BACKSLASH". | DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service STS STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-80-000124 - The vCenter UI service must enable "STRICT_SERVLET_COMPLIANCE". | DISA VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-80-000151 - The vCenter UI service must disable "ALLOW_BACKSLASH". | DISA VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VMCH-80-000195 - Virtual machines (VMs) must limit console sharing. | DISA VMware vSphere 8.0 Virtual Machine STIG v2r2 | VMware | CONFIGURATION MANAGEMENT |
| VMCH-80-000196 - Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file. | DISA VMware vSphere 8.0 Virtual Machine STIG v2r2 | VMware | CONFIGURATION MANAGEMENT |
| VMCH-80-000199 - Virtual machines (VMs) must have shared salt values disabled. | DISA VMware vSphere 8.0 Virtual Machine STIG v2r2 | VMware | CONFIGURATION MANAGEMENT |
| VMCH-80-000201 - Virtual machines (VMs) must be configured to lock when the last console connection is closed. | DISA VMware vSphere 8.0 Virtual Machine STIG v2r2 | VMware | CONFIGURATION MANAGEMENT |
| VMCH-80-000203 - Virtual machines (VMs) must enable encryption for vMotion. | DISA VMware vSphere 8.0 Virtual Machine STIG v2r2 | VMware | CONFIGURATION MANAGEMENT |
| VMCH-80-000208 - Virtual machines (VMs) must not use independent, nonpersistent disks. | DISA VMware vSphere 8.0 Virtual Machine STIG v2r2 | VMware | CONFIGURATION MANAGEMENT |
| VMCH-80-000212 - Virtual machines (VMs) must remove unneeded serial devices. | DISA VMware vSphere 8.0 Virtual Machine STIG v2r2 | VMware | CONFIGURATION MANAGEMENT |
| WN25-CC-000050 - Windows Server 2025 must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF)-generated routes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000140 - Windows Server 2025 group policy objects must be reprocessed even if they have not changed. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000180 - Windows Server 2025 users must be prompted to authenticate when the system wakes from sleep (on battery). | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-DC-000330 - Windows Server 2025 domain controllers must be configured to allow reset of machine account passwords. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000040 - The Windows Server 2025 built-in guest account must be renamed. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000100 - Windows Server 2025 maximum age for machine account passwords must be configured to 30 days or less. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000150 - The Windows Server 2025 Smart Card removal option must be configured to Force Logoff or Lock Workstation. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000240 - Windows Server 2025 must be configured to prevent anonymous users from having the same permissions as the Everyone group. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SO-000320 - Windows Server 2025 must be configured to at least negotiate signing for LDAP client signing. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
