We check VMware virtual infrastructure for compliance with security standards

vGate Compliance Checker is a free utility developed by Security Code, which allows you to check the compliance of virtual infrastructures with the requirements of industry standards and world best practices.

The result of the application is a report (which can be uploaded to HTML-format), which contains information about the compliance of the checked server (several servers) with the requirements of industry standards and world best practices.

It can be a useful tool not only for information security specialists.

')
It works under Windows OS and, since the utility does not require installation on the HDD, it can be run from a flash drive. There are two versions of the software product:

1. To verify VMware vSphere 4.1 and VMware vSphere 5

Compliance check is performed:

• PCI DSS 2.0
• VMware Security Hardening Best Practices 4.1
• CIS VMware ESX Server Benchmarks 4

download from here (rus) or from here (eng)

2. To test VMware Infrastructure 3 and VMware vSphere 4

Compliance check is performed:

• PCI DSS 1.2
• VMware Security Hardening Best Practices 4
• CIS VMware ESX Server Benchmarks 3.5

download from here (eng)

Intuitive algorithm for working with the utility:
- run the desired version of the EXE file
- specify the server to check, login and password (repeat if there are several servers)



- run the scan

The report displayed in the utility itself allows you to see which items meet or do not meet the requirements and recommendations:



The HTML report also contains detailed information on each check item:



The utility does not have any documentation or built-in help.
But they, it seems, are not needed.