Skip to content
Log In

VMware vSphere 8.0 ESXi Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000021-VMM-000050

    Group
    Show

  • SRG-OS-000023-VMM-000060

    Group
    Show

  • SRG-OS-000027-VMM-000080

    Group
    Show

  • The ESXi host must enable lockdown mode.

    Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCe...
    Rule Medium Severity
    Show

  • SRG-OS-000029-VMM-000100

    Group
    Show

  • The ESXi host client must be configured with an idle session timeout.

    The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed at https://<ESX FQDN>/ui. ESXi is not usually administered via this interface for long periods, and a...
    Rule Medium Severity
    Show

  • SRG-OS-000033-VMM-000140

    Group
    Show

  • The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.

    Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session. OpenSSH on the ESXi host ships with a FIPS 140-2 valid...
    Rule High Severity
    Show

  • SRG-OS-000037-VMM-000150

    Group
    Show

  • SRG-OS-000069-VMM-000360

    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules