Ensure Guest Host Interaction Tray Icon is disabled
Details The Guest Host Interaction Tray Icon feature should be disabled if it is not needed. Rationale: Some VMX parameters...
- Home
- Security Hardening
- CIS VMware ESXi 6.7 V1.2.0 L2
CIS VMware ESXi 6.7 V1.2.0 L2
Ensure hardware-based 3D acceleration is disabled
Details Due to performance reasons, modern graphic rendering is done within a dedicated graphic processing unit (GPU). Virtual machines can...Ensure Host Guest File System Server is disabled
Details The Host Guest File System Server should be disabled if it is not needed. Rationale: Certain automated operations such...Ensure host information is not sent to guests
Details Configure VMware Tools to disable host information from being sent to guests unless a particular VM requires this information...Ensure memSchedFakeSampleStats is disabled
Details The memSchedFakeSampleStats feature should be disabled if it is not needed. Rationale: Some VMX parameters don’t apply on vSphere...Ensure nonpersistent disks are limited
Details By default, VM disks use dependent mode, which means they are affected by snapshots. To avoid this, VM disks...Ensure only one remote console connection is permitted to a VM at any time
Details By default, remote console sessions can be connected to by more than one user at a time. Permit only...Ensure Request Disk Topology is disabled
Details The Request Disk Topology feature should be disabled if it is not needed. Rationale: Some VMX parameters don’t apply...Ensure Shell Action is disabled
Details The Shell Action feature should be disabled if it is not needed. Rationale: Some VMX parameters don’t apply on...Ensure the default value of individual salt per vm is configured
Details The concept of salting has been introduced to help address concerns system administrators may have over the security implications...