Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
268 rules foundof 11,219Page 2 of 11
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ESXI9-2.5 | Host must only run binaries delivered via signed VIBvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-2.6 | Host must have reliable time synchronization sourcesvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-2.7 | Host must have time synchronization services enabled and runningvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-2.8 | Host must require TPM-based configuration encryptionvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-2.9 | Host must not suppress warnings about unmitigated hyperthreading vulnerabilitiesvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-2.10 | Host must restrict inter-VM transparent page sharingvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-2.11 | Host must use sufficient entropy for cryptographic operationsvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.4 | Host must deactivate SLPvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.5 | Host must deactivate CIMvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.6 | Host should deactivate SNMPvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.7 | Host must automatically terminate idle DCUI sessionsvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.8 | Host must automatically terminate idle shellsvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.9 | Host must automatically deactivate shell servicesvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.10 | Host must not suppress warnings that the shell is enabledvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.12 | Host must lock an account after a specified number of failed login attemptsvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.13 | Host must unlock accounts after a specified timeout periodvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.14 | Host must configure the password history setting to restrict the reuse of passwordsvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.15 | Host must be configured with an appropriate maximum password agevmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-3.16 | Host must configure a session timeout for the APIvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.17 | Host must automatically terminate idle host client sessionsvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.18 | Host must have an accurate DCUI.Access listvmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-3.19 | Host must have an accurate Exception Users listvmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-3.22 | Host must deny shell access for the dcui accountvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.24 | Host must display a login banner for the DCUI and Host Clientvmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-3.25 | Host must display a login banner for SSH connectionsvmware · Level 1 | vmware | Medium | 1 | Automated |