Ensure unnecessary serial ports are disconnected
Details Ensure that no serial port is connected to a virtual machine unless required. For a serial port to be...
- Home
- Security Hardening
- CIS VMware ESXi 6.5 V1.0.0 L1
CIS VMware ESXi 6.5 V1.0.0 L1
Ensure unnecessary USB devices are disconnected
Details Ensure that no USB device is connected to a virtual machine unless required. For a USB device to be...Ensure use of the VM console is limited
Details The VM console enables you to connect to the console of a VM, in effect seeing what a monitor...Ensure VM Console Copy operations are disabled
Details VM console copy operations should be disabled. *Rationale* VM console copy operations are disabled by default (not explicitly specified);...Ensure VM Console Drag and Drop operations is disabled
Details VM console drag and drop operations should be disabled. *Rationale* VM console drag and drop operations are disabled by...Ensure VMsafe Agent is configured correctly
Details The VMsafe CPU/memory API allows a security virtual machine to inspect and modify the contents of the memory and...Ensure VMsafe Agent Port is configured correctly
Details The VMsafe CPU/memory API allows a security virtual machine to inspect and modify the contents of the memory and...Ensure VM Console GUI Options is disabled
Details VM console and paste GUI options should be disabled. *Rationale* VM console and paste GUI options are disabled by...Ensure VMsafe Agent Address is configured correctly
Details The VMsafe CPU/memory API allows a security virtual machine to inspect and modify the contents of the memory and...Set DCUI.Access to allow trusted users to override lockdown mode
Details Lockdown mode disables direct host access, requiring admins to manage hosts from vCenter. Set DCUI.Access to a list of...