Is STIG available for ESXi 6.5 and above

[R0SE]

Dose VMware have their own STIG tool or application for this or does a third party tool need to be downloaded and installed?

I'm looking for a STIG tool supported by VMware that always me to check how well my ESXi hosts and vCentre are hardened and highlight the risks of each issue found.

Are you able to provide me with links to the appropriate software / application and installation and testing instructions.

Kind Regards  

[nachogonzalez]

I didn't know the term STIG, they say you learn something new every day. 🙂 

Maybe this works VMware vSphere Security Configuration Guide | VMware

[nachogonzalez · Accepted solution]

In addition to that, vROPs has alerts and dashboards based on best practices and security advisories and you can customize your own and install ones developed by the community. ( for example: VMware ESXi Hardening Dashboard - Samples - VMware {code})
And also, there are some scripts/flings that allow to configure some hardening settings. (For example: VMware vSphere Security Hardening Report Check - Samples - VMware {code})

Please note, except for vROPs that is a tool developed, mantained and sold by VMware, the other options are third party tools. 

Hope that works 

[R0SE]

Thank you for the update nachogonzalez.

This would be the prefect solution but to expensive for my organisation. All we really need is the "Integrated Compliance checker". 

Basically you a tool that can test what the current vulnerabilities are and report on them.

Thanks