DISA_STIG_McAfee_VirusScan_8.8_Managed_Client_v6r1.audit from DISA McAfee VirusScan 8.8 Managed Client Security Technical implementation Guide v6r1 STIG

DTAG008 - The antivirus signature file age must not exceed 7 days.

800-53|SI-3b.

CAT|I

CCI|CCI-001240

Rule-ID|SV-216891r397864_rule

STIG-ID|DTAG008

STIG-Legacy|SV-55133

STIG-Legacy|V-19910

Vuln-ID|V-216891

DTAM001 - McAfee VirusScan On-Access General Policies must be configured to enable on-access scanning at system startup.

800-53|SI-3c.1.

CCI|CCI-001242

Rule-ID|SV-216892r397870_rule

STIG-ID|DTAM001

STIG-Legacy|SV-55134

STIG-Legacy|V-6453

Vuln-ID|V-216892

DTAM002 - McAfee VirusScan On-Access General Policies must be configured to scan boot sectors.

CAT|II

Rule-ID|SV-216893r397870_rule

STIG-ID|DTAM002

STIG-Legacy|SV-55135

STIG-Legacy|V-6467

Vuln-ID|V-216893

DTAM003 - McAfee VirusScan On-Access General Policies must be configured to scan floppy during shutdown.

Rule-ID|SV-216894r397870_rule

STIG-ID|DTAM003

STIG-Legacy|SV-55139

STIG-Legacy|V-6468

Vuln-ID|V-216894

DTAM004 - McAfee VirusScan On-Access General Policies must be configured to notify local users when detections occur.

800-53|SC-18(1)

CCI|CCI-001662

Rule-ID|SV-216895r397642_rule

STIG-ID|DTAM004

STIG-Legacy|SV-55141

STIG-Legacy|V-6469

Vuln-ID|V-216895

DTAM005 - McAfee VirusScan On-Access General Policies must be configured to prevent users from removing messages from the list.

Rule-ID|SV-216896r397870_rule

STIG-ID|DTAM005

STIG-Legacy|SV-55144

STIG-Legacy|V-6470

Vuln-ID|V-216896

DTAM009 - McAfee VirusScan On-Access General Policies must be configured to log the scan sessions.

Rule-ID|SV-216897r397870_rule

STIG-ID|DTAM009

STIG-Legacy|SV-55145

STIG-Legacy|V-6474

Vuln-ID|V-216897

DTAM010 - McAfee VirusScan On-Access General Policies log file size must be restricted and be configured to at least 10MB - bLimitSize

Rule-ID|SV-216898r397870_rule

STIG-ID|DTAM010

STIG-Legacy|SV-55147

STIG-Legacy|V-6475

Vuln-ID|V-216898

DTAM010 - McAfee VirusScan On-Access General Policies log file size must be restricted and be configured to at least 10MB - dwMaxLogSizeMB

DTAM012 - McAfee VirusScan On-Access General Policies must be configured to log the session summary.

Rule-ID|SV-216899r397870_rule

STIG-ID|DTAM012

STIG-Legacy|SV-55148

STIG-Legacy|V-6478

Vuln-ID|V-216899

DTAM013 - McAfee VirusScan On-Access General Policies must be configured to log any failure to scan encrypted files.

Rule-ID|SV-216900r397870_rule

STIG-ID|DTAM013

STIG-Legacy|SV-55149

STIG-Legacy|V-6583

Vuln-ID|V-216900

DTAM016 - McAfee VirusScan must be configured to receive DAT and Engine updates - schedule is daily

800-53|SI-3(2)

CCI|CCI-001247

Rule-ID|SV-216901r397855_rule

STIG-ID|DTAM016

STIG-Legacy|SV-55151

STIG-Legacy|V-6585

Vuln-ID|V-216901

DTAM016 - McAfee VirusScan must be configured to receive DAT and Engine updates - scheduling enabled

DTAM021 - McAfee VirusScan On-Delivery Email Scan Policies must be configured to enable on-delivery email scanning.

800-53|SC-18(4)

CCI|CCI-001170

Rule-ID|SV-216902r397708_rule

STIG-ID|DTAM021

STIG-Legacy|SV-55153

STIG-Legacy|V-6586

Vuln-ID|V-216902

DTAM022 - McAfee VirusScan On-Delivery Email Scan Policies must be configured to find unknown program threats and Trojans.

Rule-ID|SV-216903r397642_rule

STIG-ID|DTAM022

STIG-Legacy|SV-55169

STIG-Legacy|V-6587

Vuln-ID|V-216903

DTAM023 - McAfee VirusScan On Delivery Email Scan Policies must be configured to find unknown macro threats.

Rule-ID|SV-216904r397642_rule

STIG-ID|DTAM023

STIG-Legacy|SV-55171

STIG-Legacy|V-6588

Vuln-ID|V-216904

DTAM027 - McAfee VirusScan On Delivery Email Scan Policies must be configured to decode MIME encoded files.

Rule-ID|SV-216905r397708_rule

STIG-ID|DTAM027

STIG-Legacy|SV-55174

STIG-Legacy|V-6590

Vuln-ID|V-216905

DTAM028 - McAfee VirusScan On Delivery Email Scan Policies must be configured to scan email message body.

Rule-ID|SV-216906r397708_rule

STIG-ID|DTAM028

STIG-Legacy|SV-55177

STIG-Legacy|V-6591

Vuln-ID|V-216906

DTAM029 - McAfee VirusScan On Delivery Email Scan Policies, when a threat is found, must be configured to clean attachments as the first action.

800-53|SI-3c.2.

CCI|CCI-001243

Rule-ID|SV-216907r397873_rule

STIG-ID|DTAM029

STIG-Legacy|SV-55178

STIG-Legacy|V-6592

Vuln-ID|V-216907

DTAM035 - McAfee VirusScan On-Delivery Email Scan Policies must be configured to record scanning activity in a log file.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-216908r395721_rule

STIG-ID|DTAM035

STIG-Legacy|SV-55187

STIG-Legacy|V-6596

Vuln-ID|V-216908

DTAM036 - McAfee VirusScan On-Delivery Email Scan Policies log file size must be restricted and be configured to be at least 10MB - bLimitSize

800-53|AU-5b.

CCI|CCI-000140

Rule-ID|SV-216909r395805_rule

STIG-ID|DTAM036

STIG-Legacy|SV-55188

STIG-Legacy|V-6597

Vuln-ID|V-216909

DTAM036 - McAfee VirusScan On-Delivery Email Scan Policies log file size must be restricted and be configured to be at least 10MB - dwMaxLogSizeMB

DTAM039 - McAfee VirusScan On Delivery Email Scan Policies must be configured to clean attachments as the first action for when an unwanted program is found.

Rule-ID|SV-216910r397873_rule

STIG-ID|DTAM039

STIG-Legacy|SV-55189

STIG-Legacy|V-14652

Vuln-ID|V-216910

DTAM045 - McAfee VirusScan On-Demand scan must be configured to scan all fixed, or local, disks and running processes - Drives

CCI|CCI-001241

Rule-ID|SV-216911r397867_rule

STIG-ID|DTAM045

STIG-Legacy|SV-55191

STIG-Legacy|V-6599

Vuln-ID|V-216911

DTAM045 - McAfee VirusScan On-Demand scan must be configured to scan all fixed, or local, disks and running processes - SpecialMemory

DTAM046 - McAfee VirusScan On-Demand scan must be configured to scan all subfolders.

Rule-ID|SV-216912r397867_rule

STIG-ID|DTAM046

STIG-Legacy|SV-55192

STIG-Legacy|V-6600

Vuln-ID|V-216912

DTAM047 - McAfee VirusScan On-Demand scan must be configured to scan boot sectors.

Rule-ID|SV-216913r397867_rule

STIG-ID|DTAM047

STIG-Legacy|SV-55193

STIG-Legacy|V-6601

Vuln-ID|V-216913

DTAM048 - McAfee VirusScan On-Demand scan must be configured to scan all files.

Rule-ID|SV-216914r397867_rule

STIG-ID|DTAM048

STIG-Legacy|SV-55194

STIG-Legacy|V-6602

Vuln-ID|V-216914

DTAM050 - McAfee VirusScan On-Demand scan must be configured so there are no exclusions from the scan unless exclusions have been documented with, and approved by, the ISSO/ISSM/DAA.

Rule-ID|SV-216915r397867_rule

STIG-ID|DTAM050

STIG-Legacy|SV-55195

STIG-Legacy|V-6604

Vuln-ID|V-216915

DTAM052 - McAfee VirusScan On-Demand scan must be configured to scan inside archives.

Rule-ID|SV-216916r397867_rule

STIG-ID|DTAM052

STIG-Legacy|SV-55196

STIG-Legacy|V-6611

Vuln-ID|V-216916

DTAM053 - McAfee VirusScan On-Demand scan must be configured to decode MIME encoded files.

Rule-ID|SV-216917r397867_rule

STIG-ID|DTAM053

STIG-Legacy|SV-55197

STIG-Legacy|V-6612

Vuln-ID|V-216917

DTAM054 - McAfee VirusScan On-Demand scan must be configured to find unknown program threats.

Rule-ID|SV-216918r397867_rule

STIG-ID|DTAM054

STIG-Legacy|SV-55199

STIG-Legacy|V-6614

Vuln-ID|V-216918

DTAM055 - McAfee VirusScan On-Demand scan must be configured to find unknown macro threats.

Rule-ID|SV-216919r397867_rule

STIG-ID|DTAM055

STIG-Legacy|SV-55201

STIG-Legacy|V-6615

Vuln-ID|V-216919

DTAM056 - McAfee VirusScan On-Demand scan actions, When a threat is found must be configured to clean files automatically as first action.

Rule-ID|SV-216920r397873_rule

STIG-ID|DTAM056

Revision 1.0

May 27, 2022

Functional Update