TMAegisBeta

Regel-Explorer

Durchsuchen Sie jede Härtungsregel im Katalog. Filtern Sie nach Plattform, Schweregrad, Profilstufe und danach, ob die Prüfung automatisierbar ist.

268 Regeln gefundenvon 16.927Seite 3 von 11

IDTitelSchweregrad
TMA-ESXI9-3.26Host must enable the highest version of TLS supportedvmware · Stufe 1Mittel
TMA-ESXI9-4.1Host must configure a persistent log location for all locally stored system logsvmware · Stufe 1Mittel
TMA-ESXI9-4.2Host must transmit system logs to a remote log collectorvmware · Stufe 1Mittel
TMA-ESXI9-4.3Host must log sufficient information for eventsvmware · Stufe 1Mittel
TMA-ESXI9-4.4Host must set the logging informational level to infovmware · Stufe 1Mittel
TMA-ESXI9-4.5Host must deactivate log filteringvmware · Stufe 1Mittel
TMA-ESXI9-4.6Host must enable audit record loggingvmware · Stufe 1Mittel
TMA-ESXI9-4.7Host must configure a persistent log location for all locally stored audit recordsvmware · Stufe 1Mittel
TMA-ESXI9-4.8Host must store one week of audit recordsvmware · Stufe 1Mittel
TMA-ESXI9-4.9Host must transmit audit records to a remote log collectorvmware · Stufe 1Mittel
TMA-ESXI9-4.10Host must verify certificates for TLS remote logging endpointsvmware · Stufe 1Mittel
TMA-ESXI9-4.11Host must use strict x509 verification for TLS-enabled remote logging endpointsvmware · Stufe 1Mittel
TMA-ESXI9-5.2Host must block network traffic by defaultvmware · Stufe 1Mittel
TMA-ESXI9-5.3Host must restrict use of the dvFilter network APIvmware · Stufe 1Mittel
TMA-ESXI9-5.4Host must filter Bridge Protocol Data Unit (BPDU) packetsvmware · Stufe 1Mittel
TMA-ESXI9-5.6Host should reject forged transmits on standard virtual switches and port groupsvmware · Stufe 1Mittel
TMA-ESXI9-5.7Host should reject MAC address changes on standard virtual switches and port groupsvmware · Stufe 1Mittel
TMA-ESXI9-5.8Host should reject promiscuous mode requests on standard virtual switches and port groupsvmware · Stufe 1Mittel
TMA-ESXI9-5.9Host must restrict access to a default or native VLAN on standard virtual switchesvmware · Stufe 1Mittel
TMA-ESXI9-5.10Host must restrict the use of Virtual Guest Tagging (VGT) on standard virtual switchesvmware · Stufe 1Mittel
TMA-ESXI9-5.11Host must isolate management communicationsvmware · Stufe 1Mittel
TMA-ESXI9-6.1.1Host CIM services, if enabled, must limit accessvmware · Stufe 1Mittel
TMA-ESXI9-6.2.1Host must isolate storage communicationsvmware · Stufe 1Mittel
TMA-ESXI9-6.2.2Host must ensure all datastores have unique namesvmware · Stufe 1Mittel
TMA-ESXI9-6.3.1Host iSCSI client, if enabled, must employ bidirectional/mutual CHAP authenticationvmware · Stufe 1Mittel