STIGQter STIGQter: STIG Summary:

VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide

Version: 2

Release: 3 Benchmark Date: 01 Jul 2026

CheckedNameTitle
☐SV-259003r960735_ruleThe vCenter ESX Agent Manager service must limit the number of maximum concurrent connections permitted.
☐SV-259004r1137578_ruleThe vCenter ESX Agent Manager service cookies must have secure flag set.
☐SV-259005r960888_ruleThe vCenter ESX Agent Manager service must initiate session logging upon startup.
☐SV-259006r960891_ruleThe vCenter ESX Agent Manager service must produce log records containing sufficient information regarding event details.
☐SV-259007r960930_ruleThe vCenter ESX Agent Manager service logs folder permissions must be set correctly.
☐SV-259008r960960_ruleThe vCenter ESX Agent Manager service must limit privileges for creating or modifying hosted application shared files.
☐SV-259009r960963_ruleThe vCenter ESX Agent Manager service must disable stack tracing.
☐SV-259010r1043177_ruleThe vCenter ESX Agent Manager service must be configured to use a specified IP address and port.
☐SV-259011r1043180_ruleThe vCenter ESX Agent Manager service must be configured to limit data exposure between applications.
☐SV-259012r961122_ruleThe vCenter ESX Agent Manager service must be configured to fail to a known safe state if system initialization fails.
☐SV-259013r961158_ruleThe vCenter ESX Agent Manager service must set URIEncoding to UTF-8.
☐SV-259014r961167_ruleThe vCenter ESX Agent Manager service "ErrorReportValve showServerInfo" must be set to "false".
☐SV-259015r1051426_ruleThe vCenter ESX Agent Manager service must set an inactive timeout for sessions.
☐SV-259016r1210396_ruleThe vCenter ESX Agent Manager service must off-load log records onto a different system or media from the system being logged.
☐SV-259017r961863_ruleThe vCenter ESX Agent Manager service must enable STRICT_SERVLET_COMPLIANCE.
☐SV-259018r960735_ruleThe vCenter ESX Agent Manager service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive.
☐SV-259019r960735_ruleThe vCenter ESX Agent Manager service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive.
☐SV-259020r1210397_ruleThe vCenter ESX Agent Manager service must configure the "setCharacterEncodingFilter" filter.
☐SV-259021r1137578_ruleThe vCenter ESX Agent Manager service cookies must have the "http-only" flag set.
☐SV-259022r1137578_ruleThe vCenter ESX Agent Manager service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands.
☐SV-259023r960963_ruleThe vCenter ESX Agent Manager service shutdown port must be disabled.
☐SV-259024r960963_ruleThe vCenter ESX Agent Manager service debug parameter must be disabled.
☐SV-259025r960963_ruleThe vCenter ESX Agent Manager service directory listings parameter must be disabled.
☐SV-259026r960963_ruleThe vCenter ESX Agent Manager service deployXML attribute must be disabled.
☐SV-259027r960963_ruleThe vCenter ESX Agent Manager service must have Autodeploy disabled.
☐SV-259028r960963_ruleThe vCenter ESX Agent Manager service xpoweredBy attribute must be disabled.
☐SV-259029r960963_ruleThe vCenter ESX Agent Manager service example applications must be removed.
☐SV-259030r960963_ruleThe vCenter ESX Agent Manager service default ROOT web application must be removed.
☐SV-259031r960963_ruleThe vCenter ESX Agent Manager service default documentation must be removed.
☐SV-259032r961461_ruleThe vCenter ESX Agent Manager service files must have permissions in an out-of-the-box state.
☐SV-259033r961863_ruleThe vCenter ESX Agent Manager service must disable "ALLOW_BACKSLASH".
☐SV-259034r961863_ruleThe vCenter ESX Agent Manager service must enable "ENFORCE_ENCODING_IN_GET_WRITER".
☐SV-259035r960963_ruleThe vCenter ESX Agent Manager service manager webapp must be removed.
☐SV-259036r1003619_ruleThe vCenter ESX Agent Manager service host-manager webapp must be removed.