Tripwire and \nVMware have teamed up to produce a free tool that VMware customers can use to automatically audit the security configuration of physical and \nvirtual servers. \n \nTripwire ConfigCheck is a lightweight version of Tripwire Enterprise For VMware ESX Server \u2014a security and compliance-checking application designed to evaluate large server installations. \nTripwire ConfigCheck is designed to sift through the hundreds of configuration settings within VMware's ESX Server and identify those that are not set according to VMware's recommendations. \n \nThe new tool also provides guidelines users can follow to fix the problems, if they choose to do so. More information and a download is on Tripwire's ConfigCheck site. \n \nA VMware spokesperson says the company put the tool together to help customers identify and fix potential configuration problems even before calling in their security specialists. Tripwire spokespeople say they're interested in giving prospective customers a taste of their enterprise products, which cover physical and virtual assets including those from companies other than VMware. \n \nConfigCheck is available free; it will be formally announced tomorrow.