While over time VMware products have become more secure out of the box, these newer default settings are generally only applicable for new installs. Previous, less secure default configurations usually carry across as you upgrade your environment. The VMware Security Configuration Guides (previously known as the VMware Hardening Guides) include many configuration items that can be tweaked to improve your security posture, whether you’re in an environment that has passed through many upgrades or a greenfield deployment.
Runecast Analyzer automates the process of checking VMware vSphere and NSX for compliance against the VMware Security Configuration Guides – in total, 108 checks. Each finding is mapped to the affected objects, with a summary of the finding details, and a link to the relevant SCG document.
With Runecast Analyzer, you get year-round, 24/7 visibility into your audit compliance posture. It allows you to get immediate visibility into risks and non-compliances inherent in your environment, allowing you to identify gaps between where you are and a fully compliant state, and also show as soon as any objects move out of compliance.
The solution runs entirely on-premises, with no data leaving your control. All analysis takes place on the Runecast Analyzer appliance. Move to a more proactive way of handling your compliance requirements!