Problem Statement
Hello,
I haven't yet executed the script but before that I wanted to be sure to understand how CIS Benchmark VMware ESXI 8.0 is covered.
When i look at the IDs in the script or report example in the Readme, I don't see how to match with the ID of the benchmark. For example you have the ID 1.1.1 or 2.2.3 (random examples) but in the benchmark there are no such IDs. Where do the IDs come from ? Is there some kind of "ID controls mapping" available ?
Proposed Solution
The solution would be:
- To add the version of the CIS Benchmark that is used (example: CIS VMware ESXi 8.0 Benchmark v1.2.0). IDs can sometimes change from one version to another.
- To use the same IDs that CIS provide so CIS benchmark coverage is easily done.
Alternative Solutions
No response
Priority
Low
Problem Statement
Hello,
I haven't yet executed the script but before that I wanted to be sure to understand how CIS Benchmark VMware ESXI 8.0 is covered.
When i look at the IDs in the script or report example in the Readme, I don't see how to match with the ID of the benchmark. For example you have the ID 1.1.1 or 2.2.3 (random examples) but in the benchmark there are no such IDs. Where do the IDs come from ? Is there some kind of "ID controls mapping" available ?
Proposed Solution
The solution would be:
Alternative Solutions
No response
Priority
Low