규칙 탐색기
카탈로그의 모든 하드닝 규칙을 둘러보세요. 플랫폼, 심각도, 프로필 레벨 및 자동 점검 가능 여부로 필터링할 수 있습니다.
규칙 268개 찾음/ 전체 16,927개11페이지 중 3페이지
| ID | 제목 | 플랫폼 | 심각도 | 레벨 | 점검 |
|---|---|---|---|---|---|
| TMA-ESXI9-3.26 | Host must enable the highest version of TLS supportedvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.1 | Host must configure a persistent log location for all locally stored system logsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.2 | Host must transmit system logs to a remote log collectorvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.3 | Host must log sufficient information for eventsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.4 | Host must set the logging informational level to infovmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.5 | Host must deactivate log filteringvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.6 | Host must enable audit record loggingvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.7 | Host must configure a persistent log location for all locally stored audit recordsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.8 | Host must store one week of audit recordsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.9 | Host must transmit audit records to a remote log collectorvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.10 | Host must verify certificates for TLS remote logging endpointsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-4.11 | Host must use strict x509 verification for TLS-enabled remote logging endpointsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.2 | Host must block network traffic by defaultvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.3 | Host must restrict use of the dvFilter network APIvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.4 | Host must filter Bridge Protocol Data Unit (BPDU) packetsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.6 | Host should reject forged transmits on standard virtual switches and port groupsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.7 | Host should reject MAC address changes on standard virtual switches and port groupsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.8 | Host should reject promiscuous mode requests on standard virtual switches and port groupsvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.9 | Host must restrict access to a default or native VLAN on standard virtual switchesvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.10 | Host must restrict the use of Virtual Guest Tagging (VGT) on standard virtual switchesvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |
| TMA-ESXI9-5.11 | Host must isolate management communicationsvmware · 레벨 1 | vmware | 보통 | 1 | 수동 검토 |
| TMA-ESXI9-6.1.1 | Host CIM services, if enabled, must limit accessvmware · 레벨 1 | vmware | 보통 | 1 | 수동 검토 |
| TMA-ESXI9-6.2.1 | Host must isolate storage communicationsvmware · 레벨 1 | vmware | 보통 | 1 | 수동 검토 |
| TMA-ESXI9-6.2.2 | Host must ensure all datastores have unique namesvmware · 레벨 1 | vmware | 보통 | 1 | 수동 검토 |
| TMA-ESXI9-6.3.1 | Host iSCSI client, if enabled, must employ bidirectional/mutual CHAP authenticationvmware · 레벨 1 | vmware | 보통 | 1 | 자동 |