Item Search

NameAudit NamePluginCategory
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxDISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

2.006 - ACLs for system files and directories do not conform to minimum requirements. - 'C:'DISA Windows Vista STIG v6r41Windows

ACCESS CONTROL

2.014 - ACLs for disabled services do not conform to minimum standards.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.006 - Floppy media devices are not allocated upon user logon.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.014 - The Windows dialog box title for the legal banner must be configured.DISA Windows Vista STIG v6r41Windows

ACCESS CONTROL

3.034 - Unencrypted passwords must not be sent to third-party SMB Servers.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

3.045 - The Windows SMB client is not enabled to perform SMB packet signing when possible.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.049 - The Recovery Console option is set to permit automatic logon to the system.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.054 - Users are not warned in advance that their passwords will expire.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.055 - The default permissions of Global system objects are not increased.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.057 - Reversible password encryption is not disabled.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

3.059 - The system is configured to autoplay removable media.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.065 - Unauthorized shares can be accessed anonymously.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.089 - The system is not configured to meet the minimum requirement for session security for NTLM SSP based Servers.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.116 - Named Pipes and Shares can be accessed anonymously.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.127 - IPSec Exemptions are limited.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.131 - User Account Control - Behavior of elevation prompt for standard users.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

3.136 - User Account Control - Non UAC Compliant Application VirtualizationDISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

4.008 - Auditing must be configured as required. - 'Account Logon -> Credential Validation'DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.008 - Auditing must be configured as required. - 'Account Management -> Computer Account Management'DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.008 - Auditing must be configured as required. - 'Account Management -> Other Account Management Events'DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.008 - Auditing must be configured as required. - 'Account Management -> User Account Management'DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

GEN005365 - The snmpd.conf file must be group-owned by bin, sys, or system - '/etc/snmpdv3.conf'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005375 - The snmpd.conf file must not have an extended ACL - '/etc/snmpdv3.conf'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005440 - The system must not be used as a syslog server (loghost) for systems external to the enclave.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN005504 - The SSH daemon must only listen on management network addresses unless authorized for uses other than management.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005505 - The SSH daemon must be configured to only use FIPS 140-2 approved ciphers.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005538 - The SSH daemon must not allow rhosts RSA authentication.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN005550 - The SSH daemon must be configured with the Department of Defense (DoD) logon banner - 'Banner file contents'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005600 - IP forwarding for IPv4 must not be enabled, unless the system is a router.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN005740 - The NFS export configuration file must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006180 - The /var/private/smbpasswd file must be group-owned by sys or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006220 - The smb.conf file must use the hosts option to restrict access to Samba.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006230 - Samba must be configured to use encrypted passwords.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN006260 - The /etc/news/hosts.nntp (or equivalent) must have mode 0600 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006400 - The Network Information System (NIS) protocol must not be used.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006580 - The system must use an access control program.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN006640 - The system must use a virus scan program.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND INFORMATION INTEGRITY

GEN007850 - The DHCP client must not send dynamic DNS updates - 'updateDNS exists in /etc/dhcpc.opt'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN007880 - The system must not send IPv6 ICMP redirects.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN007920 - The system must not forward IPv6 source-routed packets.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008000 - Certificates used to authenticate to the LDAP server must be provided from DoD-approved external PKI - 'client Key Label'DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN008020 - The LDAP TLS connection must require a certificate and this certificate has a valid path to a trusted CA - 'ldapsslkeyf exists'DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN008050 - The /etc/ldap.conf file (or equivalent) must not contain passwords - 'bindpwd: is not unencrypted'DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN008140 - The TLS certificate authority file and/or directory (as appropriate) must be owned by rootDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008640 - The system must not use removable media as the boot loader - 'normal'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN008680 - If the system boots from removable media, it must be stored in a safe or similarly secured container.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN009200 - The system must not have the daytime service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009280 - The system must not have the PCNFS service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009340 - Xserver login managers must not be running unless needed for X11 session management.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL