TMAegisBeta

Penjelajah aturan

Jelajahi setiap aturan hardening di katalog. Filter menurut platform, tingkat keparahan, level profil, dan apakah pemeriksaan dapat diotomatisasi.

268 aturan ditemukandari 16.927Halaman 3 dari 11

IDJudulTingkat keparahan
TMA-ESXI9-3.26Host must enable the highest version of TLS supportedvmware · Level 1Sedang
TMA-ESXI9-4.1Host must configure a persistent log location for all locally stored system logsvmware · Level 1Sedang
TMA-ESXI9-4.2Host must transmit system logs to a remote log collectorvmware · Level 1Sedang
TMA-ESXI9-4.3Host must log sufficient information for eventsvmware · Level 1Sedang
TMA-ESXI9-4.4Host must set the logging informational level to infovmware · Level 1Sedang
TMA-ESXI9-4.5Host must deactivate log filteringvmware · Level 1Sedang
TMA-ESXI9-4.6Host must enable audit record loggingvmware · Level 1Sedang
TMA-ESXI9-4.7Host must configure a persistent log location for all locally stored audit recordsvmware · Level 1Sedang
TMA-ESXI9-4.8Host must store one week of audit recordsvmware · Level 1Sedang
TMA-ESXI9-4.9Host must transmit audit records to a remote log collectorvmware · Level 1Sedang
TMA-ESXI9-4.10Host must verify certificates for TLS remote logging endpointsvmware · Level 1Sedang
TMA-ESXI9-4.11Host must use strict x509 verification for TLS-enabled remote logging endpointsvmware · Level 1Sedang
TMA-ESXI9-5.2Host must block network traffic by defaultvmware · Level 1Sedang
TMA-ESXI9-5.3Host must restrict use of the dvFilter network APIvmware · Level 1Sedang
TMA-ESXI9-5.4Host must filter Bridge Protocol Data Unit (BPDU) packetsvmware · Level 1Sedang
TMA-ESXI9-5.6Host should reject forged transmits on standard virtual switches and port groupsvmware · Level 1Sedang
TMA-ESXI9-5.7Host should reject MAC address changes on standard virtual switches and port groupsvmware · Level 1Sedang
TMA-ESXI9-5.8Host should reject promiscuous mode requests on standard virtual switches and port groupsvmware · Level 1Sedang
TMA-ESXI9-5.9Host must restrict access to a default or native VLAN on standard virtual switchesvmware · Level 1Sedang
TMA-ESXI9-5.10Host must restrict the use of Virtual Guest Tagging (VGT) on standard virtual switchesvmware · Level 1Sedang
TMA-ESXI9-5.11Host must isolate management communicationsvmware · Level 1Sedang
TMA-ESXI9-6.1.1Host CIM services, if enabled, must limit accessvmware · Level 1Sedang
TMA-ESXI9-6.2.1Host must isolate storage communicationsvmware · Level 1Sedang
TMA-ESXI9-6.2.2Host must ensure all datastores have unique namesvmware · Level 1Sedang
TMA-ESXI9-6.3.1Host iSCSI client, if enabled, must employ bidirectional/mutual CHAP authenticationvmware · Level 1Sedang