Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
268 rules foundof 11,219Page 1 of 11
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ESXI9-1.2 | Host hardware must enable UEFI Secure Bootvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-ESXI9-2.4 | Host image profile acceptance level must be PartnerSupported or highervmware · Level 1 | vmware | High | 1 | Automated |
| TMA-ESXI9-3.1 | Host should deactivate SSHvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-ESXI9-3.2 | Host must deactivate the ESXi shellvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-ESXI9-3.3 | Host must deactivate the ESXi Managed Object Browser (MOB)vmware · Level 1 | vmware | High | 1 | Automated |
| TMA-ESXI9-3.11 | Host must enforce password complexityvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-ESXI9-3.20 | Host must enable lockdown modevmware · Level 1 | vmware | High | 1 | Automated |
| TMA-ESXI9-5.1 | Host firewall must only allow traffic from authorized networksvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-VMWARE-1.2 | Host hardware must enable UEFI Secure Bootvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-VMWARE-2.4 | Host image profile acceptance level must be PartnerSupported or highervmware · Level 1 | vmware | High | 1 | Automated |
| TMA-VMWARE-3.1 | Host should deactivate SSHvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-VMWARE-3.2 | Host must deactivate the ESXi shellvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-VMWARE-3.3 | Host must deactivate the ESXi Managed Object Browser (MOB)vmware · Level 1 | vmware | High | 1 | Automated |
| TMA-VMWARE-3.11 | Host must enforce password complexityvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-VMWARE-3.20 | Host must enable lockdown modevmware · Level 1 | vmware | High | 1 | Automated |
| TMA-VMWARE-5.1 | Host firewall must only allow traffic from authorized networksvmware · Level 1 | vmware | High | 1 | Automated |
| TMA-ESXI9-1.1 | Host hardware must have auditable, authentic, and up to date system & device firmwarevmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-1.3 | Host hardware must enable Intel TXT, if availablevmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-1.4 | Host hardware must enable and configure a TPM 2.0vmware · Level 1 | vmware | Medium | 1 | Automated |
| TMA-ESXI9-1.5 | Host integrated hardware management controller must be securevmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-1.6 | Host integrated hardware management controller must enable time synchronizationvmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-1.7 | Host integrated hardware management controller must enable remote logging of eventsvmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-2.1 | Host must run software that has not reached End of General Support statusvmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-2.2 | Host must have all software updates installedvmware · Level 1 | vmware | Medium | 1 | Manual review |
| TMA-ESXI9-2.3 | Host must enable Secure Boot enforcementvmware · Level 1 | vmware | Medium | 1 | Automated |