TMAegisBeta

Kural gezgini

Katalogdaki her sıkılaştırma kuralına göz atın. Platforma, önem derecesine, profil düzeyine ve denetimin otomatikleştirilip otomatikleştirilemeyeceğine göre filtreleyin.

268 kural bulundu/ 16.927Sayfa 3 / 11

KimlikBaşlıkÖnem derecesi
TMA-ESXI9-3.26Host must enable the highest version of TLS supportedvmware · Düzey 1Orta
TMA-ESXI9-4.1Host must configure a persistent log location for all locally stored system logsvmware · Düzey 1Orta
TMA-ESXI9-4.2Host must transmit system logs to a remote log collectorvmware · Düzey 1Orta
TMA-ESXI9-4.3Host must log sufficient information for eventsvmware · Düzey 1Orta
TMA-ESXI9-4.4Host must set the logging informational level to infovmware · Düzey 1Orta
TMA-ESXI9-4.5Host must deactivate log filteringvmware · Düzey 1Orta
TMA-ESXI9-4.6Host must enable audit record loggingvmware · Düzey 1Orta
TMA-ESXI9-4.7Host must configure a persistent log location for all locally stored audit recordsvmware · Düzey 1Orta
TMA-ESXI9-4.8Host must store one week of audit recordsvmware · Düzey 1Orta
TMA-ESXI9-4.9Host must transmit audit records to a remote log collectorvmware · Düzey 1Orta
TMA-ESXI9-4.10Host must verify certificates for TLS remote logging endpointsvmware · Düzey 1Orta
TMA-ESXI9-4.11Host must use strict x509 verification for TLS-enabled remote logging endpointsvmware · Düzey 1Orta
TMA-ESXI9-5.2Host must block network traffic by defaultvmware · Düzey 1Orta
TMA-ESXI9-5.3Host must restrict use of the dvFilter network APIvmware · Düzey 1Orta
TMA-ESXI9-5.4Host must filter Bridge Protocol Data Unit (BPDU) packetsvmware · Düzey 1Orta
TMA-ESXI9-5.6Host should reject forged transmits on standard virtual switches and port groupsvmware · Düzey 1Orta
TMA-ESXI9-5.7Host should reject MAC address changes on standard virtual switches and port groupsvmware · Düzey 1Orta
TMA-ESXI9-5.8Host should reject promiscuous mode requests on standard virtual switches and port groupsvmware · Düzey 1Orta
TMA-ESXI9-5.9Host must restrict access to a default or native VLAN on standard virtual switchesvmware · Düzey 1Orta
TMA-ESXI9-5.10Host must restrict the use of Virtual Guest Tagging (VGT) on standard virtual switchesvmware · Düzey 1Orta
TMA-ESXI9-5.11Host must isolate management communicationsvmware · Düzey 1Orta
TMA-ESXI9-6.1.1Host CIM services, if enabled, must limit accessvmware · Düzey 1Orta
TMA-ESXI9-6.2.1Host must isolate storage communicationsvmware · Düzey 1Orta
TMA-ESXI9-6.2.2Host must ensure all datastores have unique namesvmware · Düzey 1Orta
TMA-ESXI9-6.3.1Host iSCSI client, if enabled, must employ bidirectional/mutual CHAP authenticationvmware · Düzey 1Orta