2023/03

The United States (U.S.) Department of Defense (DoD) Defense Information Systems Agency (DISA) officially released the VMware vSphere 7.0 STIG on March 15, 2023. This STIG closely follows VMware’s vSphere 7.0 STIG Readiness Guide. As with previous STIG releases, I have created custom compliance and alerting content for use within Aria Operations. This content covers almost all findings for the Virtual Machine STIG, a large portion of the ESXi STIG, and a select number of items from the vCenter STIG.

Almost three years after VMware vSphere 7.0 was released (April 2, 2020), the Defense Information Systems Agency (DISA) made available the first STIGs for VMware vSphere 7.0 on March 15, 2023. The STIGs can be downloaded from the Public DoD Cyber Exchange STIGs Document Library by searching for “VMware vSphere 7.0 STIG”. I have not completed an in-depth comparison, but from what I’ve noticed, this STIG release aligns with the content previously provided by VMware in their VMware vSphere 7.

VMware released the latest update to the VMware Aria Suite, VMware Aria Automation 8.11.1, on February 21, 2023. This release focuses primarily on customized notifications in Service Broker, CPU/Storage capacity enhancements, Google Cloud Platform (GCP) improvements, minor product enhancements, and bug fixes.