vcenter risk assessment/tools

[cb122]

Can anyone provide details of some useful tools that would assist in conducting a risk assessment/compliance audit of vcenter and 8x vsphere (v5) hosts? Similar to Microsofts best practice analyzers. But anything to identify risks/misconfigurations in the way vcenter or vsphere has been setup?

[Troy_Clavell · Accepted solution]

you can use the vSphere 5.1 Hardening Guide - Official Release

...and maybe run a script for the audit?

vSphere Security Hardening Report Script 5.1

[cb122]

Thanks Troy, any idea how the script compares to the free compliance checker for vSphere? Does it check for the same kind of issues, or does it check for more?

The only other thing I was hoping for some input to, was risks associated with vCenter and vSphere above and beyond security related risks. I'd like the assessment to cover all risks not just security related ones.