STIGQter STIGQter: STIG Summary:

VMware vSphere 7.0 Virtual Machine Security Technical Implementation Guide

Version: 1

Release: 4 Benchmark Date: 30 Jan 2025

CheckedNameTitle
SV-256450r959010_ruleCopy operations must be disabled on the virtual machine (VM).
SV-256451r959010_ruleDrag and drop operations must be disabled on the virtual machine (VM).
SV-256452r959010_rulePaste operations must be disabled on the virtual machine (VM).
SV-256453r959010_ruleVirtual disk shrinking must be disabled on the virtual machine (VM).
SV-256454r959010_ruleVirtual disk wiping must be disabled on the virtual machine (VM).
SV-256455r959010_ruleIndependent, nonpersistent disks must not be used on the virtual machine (VM).
SV-256456r959010_ruleHost Guest File System (HGFS) file transfers must be disabled on the virtual machine (VM).
SV-256457r959010_ruleUnauthorized floppy devices must be disconnected on the virtual machine (VM).
SV-256458r959010_ruleUnauthorized CD/DVD devices must be disconnected on the virtual machine (VM).
SV-256459r959010_ruleUnauthorized parallel devices must be disconnected on the virtual machine (VM).
SV-256460r959010_ruleUnauthorized serial devices must be disconnected on the virtual machine (VM).
SV-256461r959010_ruleUnauthorized USB devices must be disconnected on the virtual machine (VM).
SV-256462r959010_ruleConsole connection sharing must be limited on the virtual machine (VM).
SV-256463r1051422_ruleInformational messages from the virtual machine to the VMX file must be limited on the virtual machine (VM).
SV-256464r959010_ruleUnauthorized removal, connection, and modification of devices must be prevented on the virtual machine (VM).
SV-256465r959010_ruleThe virtual machine (VM) must not be able to obtain host information from the hypervisor.
SV-256466r959010_ruleShared salt values must be disabled on the virtual machine (VM).
SV-256467r959010_ruleAccess to virtual machines (VMs) through the "dvfilter" network Application Programming Interface (API) must be controlled.
SV-256468r959010_ruleSystem administrators must use templates to deploy virtual machines (VMs) whenever possible.
SV-256469r959010_ruleUse of the virtual machine (VM) console must be minimized.
SV-256470r959010_ruleThe virtual machine (VM) guest operating system must be locked when the last console connection is closed.
SV-256471r959010_ruleAll 3D features on the virtual machine (VM) must be disabled when not required.
SV-256472r959010_ruleEncryption must be enabled for vMotion on the virtual machine (VM).
SV-256473r959010_ruleLogging must be enabled on the virtual machine (VM).
SV-256474r959010_ruleLog size must be configured properly on the virtual machine (VM).
SV-256475r959010_ruleLog retention must be configured properly on the virtual machine (VM).
SV-256476r959010_ruleDirectPath I/O must be disabled on the virtual machine (VM) when not required.
SV-256477r959010_ruleEncryption must be enabled for Fault Tolerance on the virtual machine (VM).