DISA McAfee VirusScan 8.8 Local Client STIG v5r16

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: DISA McAfee VirusScan 8.8 Local Client STIG v5r16

Updated: 5/27/2022

Authority: DISA STIG

Plugin: Windows

Revision: 1.9

Estimated Item Count: 99

File Details

Filename: DISA_STIG_McAfee_VirusScan_8.8_Local_Client_v5r16.audit

Size: 408 kB

MD5: c1038fdf23036797e11a9c8583f6b654
SHA256: 7bd4213e74afb954d72ed2103d3948d18a3eaf08a5a7b44530cd2dd92a407431

Audit Items

DescriptionCategories
DISA_STIG_McAfee_VirusScan_8.8_Local_Client_v5r15.audit for Microsoft Windows from DISA STIG McAfee VirusScan 8.8 v5r16
DISA_STIG_McAfee_VirusScan_8.8_Local_Client_v5r16.audit for Microsoft Windows from DISA STIG McAfee VirusScan 8.8 v5r15
DTAG008 - The antivirus signature file age must not exceed 7 days.

SYSTEM AND INFORMATION INTEGRITY

DTAM001 - McAfee VirusScan On-Access Scanner General Settings must be configured to enable on-access scanning at system startup.

SYSTEM AND INFORMATION INTEGRITY

DTAM002 - McAfee VirusScan On-Access Scanner General Settings must be configured to scan boot sectors.

SYSTEM AND INFORMATION INTEGRITY

DTAM003 - McAfee VirusScan On-Access Scanner General Settings must be configured to scan floppy during shutdown.

SYSTEM AND INFORMATION INTEGRITY

DTAM004 - McAfee VirusScan On-Access Scanner General Settings must be configured to notify local users when detections occur.

SYSTEM AND INFORMATION INTEGRITY

DTAM005 - McAfee VirusScan On-Access Scanner General Settings must be configured to prevent users from removing messages from the list.

SYSTEM AND INFORMATION INTEGRITY

DTAM009 - McAfee VirusScan On-Access Scanner General Settings must be configured to log the scan sessions.

SYSTEM AND INFORMATION INTEGRITY

DTAM010 - McAfee VirusScan On-Access Scanner General Settings log file size must be limited to at least 10MB (bLimitSize)

SYSTEM AND INFORMATION INTEGRITY

DTAM010 - McAfee VirusScan On-Access Scanner General Settings log file size must be limited to at least 10MB (dwMaxLogSizeMB)

SYSTEM AND INFORMATION INTEGRITY

DTAM012 - McAfee VirusScan On-Access Scanner General Settings must be configured to log the session summary.

SYSTEM AND INFORMATION INTEGRITY

DTAM013 - McAfee VirusScan On-Access Scanner General Settings must be configured to log any failure to scan encrypted files.

SYSTEM AND INFORMATION INTEGRITY

DTAM016 - McAfee VirusScan must be configured to receive DAT and Engine updates (schedule is daily).

SYSTEM AND INFORMATION INTEGRITY

DTAM016 - McAfee VirusScan must be configured to receive DAT and Engine updates (scheduling enabled).

SYSTEM AND INFORMATION INTEGRITY

DTAM021 - McAfee VirusScan On Delivery Email Scanner Properties must be configured to enable on-delivery email scanning.

SYSTEM AND INFORMATION INTEGRITY

DTAM022 - McAfee VirusScan On-Delivery Email Scanner must be configured to find unknown program threats and trojans.

SYSTEM AND INFORMATION INTEGRITY

DTAM023 - McAfee VirusScan On Delivery Email Scanner Properties must be configured to find unknown macro threats.

SYSTEM AND INFORMATION INTEGRITY

DTAM027 - McAfee VirusScan On Delivery Email Scanner Properties must be configured to decode MIME encoded files.

SYSTEM AND INFORMATION INTEGRITY

DTAM028 - McAfee VirusScan On Delivery Email Scanner Properties must be configured to scan email message body.

SYSTEM AND INFORMATION INTEGRITY

DTAM029 - McAfee VirusScan On Delivery Email Scanner: When a threat is found, must be configured to clean attachments as the first action.

SYSTEM AND INFORMATION INTEGRITY

DTAM035 - McAfee VirusScan On Delivery Email Scanner Properties must be configured to record scanning activity in a log file.

SYSTEM AND INFORMATION INTEGRITY

DTAM036 - McAfee VirusScan On-Delivery Email Scanner log file size must be configured to be at least 10MB (dwMaxLogSizeMB)

SYSTEM AND INFORMATION INTEGRITY

DTAM036 - McAfee VirusScan On-Delivery Email Scanner log file size must be restricted (bLimitSize)

SYSTEM AND INFORMATION INTEGRITY

DTAM039 - McAfee VirusScan On Delivery Email Scanner must be configured to clean attachments as its first action.

SYSTEM AND INFORMATION INTEGRITY

DTAM045 - McAfee VirusScan On-Demand scan must be configured to scan all fixed or local disks.

SYSTEM AND INFORMATION INTEGRITY

DTAM045 - McAfee VirusScan On-Demand scan must be configured to scan all running processes.

SYSTEM AND INFORMATION INTEGRITY

DTAM046 - McAfee VirusScan On-Demand scan must be configured to scan all subfolders.

SYSTEM AND INFORMATION INTEGRITY

DTAM047 - McAfee VirusScan On-Demand scan must be configured to scan boot sectors.

SYSTEM AND INFORMATION INTEGRITY

DTAM048 - McAfee VirusScan On-Demand scan must be configured to scan all files.

SYSTEM AND INFORMATION INTEGRITY

DTAM050 - McAfee VirusScan On-Demand scan must be configured so there are no exclusions unless approved by the ISSO/ISSM/DAA.

SYSTEM AND INFORMATION INTEGRITY

DTAM052 - McAfee VirusScan On-Demand scan must be configured to scan inside archives.

SYSTEM AND INFORMATION INTEGRITY

DTAM053 - McAfee VirusScan On-Demand scan must be configured to decode MIME encoded files.

SYSTEM AND INFORMATION INTEGRITY

DTAM054 - McAfee VirusScan On-Demand scan must be configured to find unknown program threats.

SYSTEM AND INFORMATION INTEGRITY

DTAM055 - McAfee VirusScan On-Demand scan must be configured to find unknown macro threats.

SYSTEM AND INFORMATION INTEGRITY

DTAM056 - McAfee VirusScan On-Demand scan actions, When a threat is found must be configured to clean files automatically as first action.

SYSTEM AND INFORMATION INTEGRITY

DTAM057 - McAfee VirusScan On-Demand scan actions must be configured to delete files automatically if first action fails.

SYSTEM AND INFORMATION INTEGRITY

DTAM058 - McAfee VirusScan On-Demand scan must be configured to detect for unwanted programs.

SYSTEM AND INFORMATION INTEGRITY

DTAM059 - McAfee VirusScan On-Demand scan must be configured to record scanning activity in a log file.

SYSTEM AND INFORMATION INTEGRITY

DTAM060 - McAfee VirusScan On-Demand scan log file size must be configured to at least 10MB.

SYSTEM AND INFORMATION INTEGRITY

DTAM060 - McAfee VirusScan On-Demand scan log file size must be restricted.

SYSTEM AND INFORMATION INTEGRITY

DTAM063 - McAfee VirusScan On-Demand scan must be configured to log any failure to scan encrypted files.

SYSTEM AND INFORMATION INTEGRITY

DTAM070 - McAfee VirusScan On-Demand scan must be scheduled to be executed at least on a weekly basis.
DTAM090 - McAfee VirusScan On-Access Scanner General Settings must be configured to enable scanning of scripts.

SYSTEM AND INFORMATION INTEGRITY

DTAM091 - McAfee VirusScan On-Access Scanner General Settings must be configured to block connections for threatened files in shared folders

SYSTEM AND INFORMATION INTEGRITY

DTAM092 - McAfee VirusScan On-Access Scanner General Settings must be configured to unblock connections after a minimum of 30 minutes.

SYSTEM AND INFORMATION INTEGRITY

DTAM093 - McAfee VirusScan must be configured to block connections when files with potentially unwanted programs are detected.

SYSTEM AND INFORMATION INTEGRITY

DTAM100 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to use only one scanning policy for all processes.

SYSTEM AND INFORMATION INTEGRITY

DTAM101 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to scan when writing to disk.

SYSTEM AND INFORMATION INTEGRITY

DTAM102 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to scan when reading from disk.

SYSTEM AND INFORMATION INTEGRITY