Revision 1.14

Feb 11, 2021
Functional Update
  • 3.5.4.1.1 Ensure default deny firewall policy - 'Chain FORWARD'
  • 3.5.4.1.1 Ensure default deny firewall policy - 'Chain INPUT'
  • 3.5.4.1.1 Ensure default deny firewall policy - 'Chain OUTPUT'
  • 3.5.4.2.1 Ensure IPv6 default deny firewall policy - 'Chain FORWARD'
  • 3.5.4.2.1 Ensure IPv6 default deny firewall policy - 'Chain INPUT'
  • 3.5.4.2.1 Ensure IPv6 default deny firewall policy - 'Chain OUTPUT'
  • 5.2.13 Ensure only strong Ciphers are used - approved ciphers
  • 5.2.13 Ensure only strong Ciphers are used - weak ciphers
  • 5.2.14 Ensure only strong MAC algorithms are used - approved MACs
  • 5.2.14 Ensure only strong MAC algorithms are used - weak MACs
  • 5.2.15 Ensure only strong Key Exchange algorithms are used - approved algorithms
  • 5.2.15 Ensure only strong Key Exchange algorithms are used - weak algorithms
Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • References updated.
Added
  • 1.8.1.1 Ensure message of the day is configured properly - banner
  • 1.8.1.1 Ensure message of the day is configured properly - platform flags
  • 1.8.1.2 Ensure local login warning banner is configured properly - banner
  • 1.8.1.2 Ensure local login warning banner is configured properly - platform flags
  • 1.8.1.3 Ensure remote login warning banner is configured properly - banner
  • 1.8.1.3 Ensure remote login warning banner is configured properly - platform flags
Removed
  • 1.8.1.1 Ensure message of the day is configured properly
  • 1.8.1.2 Ensure local login warning banner is configured properly
  • 1.8.1.3 Ensure remote login warning banner is configured properly