CIS NGINX Benchmark v2.0.0 L2 Loadbalancer

This audit file has been deprecated and will be removed in a future update.

Name: CIS NGINX Benchmark v2.0.0 L2 Loadbalancer

Updated: 8/21/2023

Authority: CIS

Plugin: Unix

Revision: 1.1

Estimated Item Count: 15

Filename: CIS_NGINX_v2.0.0_Level_2_Loadbalancer.audit

Size: 25.7 kB

MD5: 56e57baeea531f73df66050907f5f06c

SHA256: 76da8c704d17e0ff7692e7b866d7bdd50187e87483b9b2f1b659a8b45d787ab0

Description	Categories
1.1.2 Ensure NGINX is installed from source
2.1.1 Ensure only required modules are installed
2.1.2 Ensure HTTP WebDAV module is not installed
2.1.3 Ensure modules with gzip functionality are disabled
3.5 Ensure error logs are sent to a remote syslog server
3.6 Ensure access logs are sent to a remote syslog server
4.1.10 Ensure the upstream traffic server certificate is trusted
4.1.11 Ensure your domain is preloaded
4.1.12 Ensure session resumption is disabled to enable perfect forward security
4.1.14 Ensure only Perfect Forward Secrecy Ciphers are Leveraged - proxy_ssl_ciphers
4.1.14 Ensure only Perfect Forward Secrecy Ciphers are Leveraged - ssl_ciphers
5.1.1 Ensure allow and deny filters limit access to specific IP addresses
5.2.4 Ensure the number of connections per IP address is limited
5.2.5 Ensure rate limits by IP address are set
CIS_NGINX_v2.0.0_Level_2_Loadbalancer.audit from CIS NGINX Benchmark v2.0.0