Tripwire recently released a tool to check the security configurationof VMware ESX Servers called ConfigCheck.

The free utility runs only on Windows and connects remotely to ESX hosts. The tool verifies the ESX configuration against a specific security guideline that VMware published.

Tripwire also has a free document that guides admins in correcting any reported configuration issues.

Tripwire also offers an enterprise version of this tool through BMC.