Today i came across an article from techtarget.com about securing and auditing VM’s and ESX hosts.
There are a few free tools that can help you audit your host servers. Tripwire’s ConfigCheck and Configuresoft’s Compliance Checker for ESX, both of which are lite versions of each company’s enterprise-level product.
Read the full article here.
I have used the tripwire product. I know from an SE at VMware that the Tripwire product was jointly developed with VMware and has been featured in all of their lab sessions. I have used it and found some good value. The configuresoft product is more of a copycat and was built without vmware’s help, so I am not sure if it is as good.