CIS compliance (management pack) dashboard missing vDS and vPG
Article ID: 441082
Updated On:
Products
Issue/Introduction
On the VMware aria operations CIS management pack compliance dashboard, specific networking objects are missing from the compliance breakdown view. Specifically, within the "objects breakdown" section, the items for "vSphere distributed switches" (vDS) and "vSphere distributed port groups" (vPG) are absent despite being expected per standard compliance requirements.
Environment
VMware aria operations 8.18.5
VMware vCenter server 7.0.x and 8.0.x
TCP 5.1
Cause
For vCenter server versions 7.0.x and 8.0.x, the native CIS compliance guide does not cover controls for assessing vSphere distributed switch and vSphere port group objects. As a result, aria operations skips evaluation of these objects in 7.0.x and 8.0.x environments, which prevents the necessary alerts from being triggered and the object breakdown section from being populated.
Resolution
To resolve this issue and force evaluation of the missing networking objects, create a custom compliance benchmark by following these steps:
Log in to the aria operations user interface.
Navigate to configure > alerts > alert definitions.
Use the filter to locate the native CIS compliance alert definition corresponding to the vDS or vPG objects that are currently bypassing evaluation.
Select the target alert definition, click the vertical ellipsis (actions menu), and select clone.
Assign a distinct name to bypass native overrides (e.g., custom - CIS - vDS/vPG compliance).
Advance through the wizard steps (base object, symptoms, recommendations) without altering the core diagnostic logic or original symptom conditions.
Click create to save the cloned alert definition.
Navigate to configure > compliance.
Go to the all benchmarks tab, select custom benchmarks, and click add to create a new custom scorecard.
Define the name and description for the custom benchmark.
In the alert definitions assignment section, search for "users" and select the cloned alert definition created in Step 7.
Click save to finalize the custom benchmark.
- Please wait for at least 5+ minutes while the process completes its initial assessments.
The results will appear as shown in the screenshot below:
Additional Information
Feedback
