ESXI-65-000009 - The ESXi host SSH daemon must be configured with the Department of Defense (DoD) login banner.

800-53|AC-8

CAT|II

CCI|CCI-000048

Rule-ID|SV-104051r1_rule

STIG-ID|ESXI-65-000009

Vuln-ID|V-93965

ESXI-65-000010 - The ESXi host SSH daemon must use DoD-approved encryption to protect the confidentiality of remote access sessions.

800-53|SC-13

CCI|CCI-000068

Rule-ID|SV-104053r1_rule

STIG-ID|ESXI-65-000010

Vuln-ID|V-93967

ESXI-65-000011 - The ESXi host SSH daemon must be configured to use only the SSHv2 protocol.

CAT|I

Rule-ID|SV-104055r1_rule

STIG-ID|ESXI-65-000011

Vuln-ID|V-93969

ESXI-65-000012 - The ESXi host SSH daemon must ignore .rhosts files.

800-53|AC-14

800-53|IA-5

CCI|CCI-000767

Rule-ID|SV-104057r1_rule

STIG-ID|ESXI-65-000012

Vuln-ID|V-93971

ESXI-65-000013 - The ESXi host SSH daemon must not allow host-based authentication.

CCI|CCI-000366

Rule-ID|SV-104059r1_rule

STIG-ID|ESXI-65-000013

Vuln-ID|V-93973

ESXI-65-000014 - The ESXi host SSH daemon must not permit root logins.

800-53|AC-17

CAT|III

Rule-ID|SV-104061r1_rule

STIG-ID|ESXI-65-000014

Vuln-ID|V-93975

ESXI-65-000015 - The ESXi host SSH daemon must not allow authentication using an empty password.

Rule-ID|SV-104063r1_rule

STIG-ID|ESXI-65-000015

Vuln-ID|V-93977

ESXI-65-000016 - The ESXi host SSH daemon must not permit user environment settings.

800-53|CM-6

CSCv6|3.1

Rule-ID|SV-104065r1_rule

STIG-ID|ESXI-65-000016

Vuln-ID|V-93979

ESXI-65-000017 - The ESXi host SSH daemon must be configured to only use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hash algorithms.

Rule-ID|SV-104067r1_rule

STIG-ID|ESXI-65-000017

Vuln-ID|V-93981

ESXI-65-000018 - The ESXi host SSH daemon must not permit GSSAPI authentication.

Rule-ID|SV-104069r1_rule

STIG-ID|ESXI-65-000018

Vuln-ID|V-93983

ESXI-65-000019 - The ESXi host SSH daemon must not permit Kerberos authentication.

Rule-ID|SV-104071r1_rule

STIG-ID|ESXI-65-000019

Vuln-ID|V-93985

ESXI-65-000020 - The ESXi host SSH daemon must perform strict mode checking of home directory configuration files.

Rule-ID|SV-104073r1_rule

STIG-ID|ESXI-65-000020

Vuln-ID|V-93987

ESXI-65-000021 - The ESXi host SSH daemon must not allow compression or must only allow compression after successful authentication.

Rule-ID|SV-104075r1_rule

STIG-ID|ESXI-65-000021

Vuln-ID|V-93989

ESXI-65-000022 - The ESXi host SSH daemon must be configured to not allow gateway ports.

Rule-ID|SV-104077r1_rule

STIG-ID|ESXI-65-000022

Vuln-ID|V-93991

ESXI-65-000023 - The ESXi host SSH daemon must be configured to not allow X11 forwarding.

Rule-ID|SV-104079r1_rule

STIG-ID|ESXI-65-000023

Vuln-ID|V-93993

ESXI-65-000024 - The ESXi host SSH daemon must not accept environment variables from the client.

Rule-ID|SV-104081r1_rule

STIG-ID|ESXI-65-000024

Vuln-ID|V-93995

ESXI-65-000025 - The ESXi host SSH daemon must not permit tunnels.

Rule-ID|SV-104083r1_rule

STIG-ID|ESXI-65-000025

Vuln-ID|V-93997

ESXI-65-000026 - The ESXi host SSH daemon must set a timeout count on idle sessions.

800-53|AC-12

CSCv6|16.4

Rule-ID|SV-104085r1_rule

STIG-ID|ESXI-65-000026

Vuln-ID|V-93999

ESXI-65-000027 - The ESXi hostSSH daemon must set a timeout interval on idle sessions.

Rule-ID|SV-104087r1_rule

STIG-ID|ESXI-65-000027

Vuln-ID|V-94001

ESXI-65-000028 - The ESXi host SSH daemon must limit connections to a single session.

800-53|AC-10

Rule-ID|SV-104089r1_rule

STIG-ID|ESXI-65-000028

Vuln-ID|V-94003

ESXI-65-000029 - The ESXi host must remove keys from the SSH authorized_keys file.

Rule-ID|SV-104091r1_rule

STIG-ID|ESXI-65-000029

Vuln-ID|V-94005

ESXI-65-000032 - The ESXi host must prohibit the reuse of passwords within five iterations.

800-53|IA-5(1)

CCI|CCI-000200

Rule-ID|SV-104097r1_rule

STIG-ID|ESXI-65-000032

Vuln-ID|V-94011

ESXI-65-000033 - The password hashes stored on the ESXi host must have been generated using a FIPS 140-2 approved cryptographic hashing algorithm.

Rule-ID|SV-104099r1_rule

STIG-ID|ESXI-65-000033

Vuln-ID|V-94013

ESXI-65-000044 - The ESXi host must enable kernel core dumps.

800-53|SC-24

CCI|CCI-001665

Rule-ID|SV-104121r1_rule

STIG-ID|ESXI-65-000044

Vuln-ID|V-94035

ESXI-65-000047 - The ESXi Image Profile and VIB Acceptance Levels must be verified.

800-53|CM-7(5)

CCI|CCI-001749

Rule-ID|SV-104127r1_rule

STIG-ID|ESXI-65-000047

Vuln-ID|V-94041

ESXI-65-000056 - The ESXi host must configure the firewall to restrict access to services running on the host.

Rule-ID|SV-104145r1_rule

STIG-ID|ESXI-65-000056

Vuln-ID|V-94059

ESXI-65-000076 - The ESXi host must enable Secure Boot.

800-53|SI-7(9)

Rule-ID|SV-104317r1_rule

STIG-ID|ESXI-65-000076

Vuln-ID|V-94487

ESXI-65-000078 - The ESXi host must use DoD-approved certificates.

Detections

Analytics

Revision 1.4

Jul 30, 2021

Miscellaneous