Item Search

NameAudit NamePluginCategory
1.1.11 - AirWatch - Erase all data before return, recycle, reassignment, or other dispositionAirWatch - CIS Google Android 4 v1.0.0 L1MDM

ACCESS CONTROL

1.7.5 Ensure GDM screen locks cannot be overriddenCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

1.8.5 Ensure GDM screen locks cannot be overriddenCIS Ubuntu Linux 18.04 LTS v2.2.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

1.8.5 Ensure GDM screen locks cannot be overriddenCIS Ubuntu Linux 18.04 LTS v2.2.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

18.9.26.2 Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

IDENTIFICATION AND AUTHENTICATION

ADBP-XI-000210 - Adobe Acrobat Pro XI Enhanced Security for browser mode must be enabled.DISA Adobe Acrobat Pro XI STIG v1r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

ADBP-XI-000290 - Adobe Acrobat Pro XI must be configured to block Flash Content.DISA Adobe Acrobat Pro XI STIG v1r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

ADBP-XI-000840 - Adobe Acrobat Pro XI privileged file and folder locations must be disabled.DISA Adobe Acrobat Pro XI STIG v1r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

ADBP-XI-001315 - Adobe Acrobat Pro XI SharePoint and Office365 Access must be disabled.DISA Adobe Acrobat Pro XI STIG v1r2Windows

CONFIGURATION MANAGEMENT

ADBP-XI-005000 - An unsupported Adobe Acrobat Pro version must not be installed.DISA Adobe Acrobat Pro XI STIG v1r2Windows

SYSTEM AND INFORMATION INTEGRITY

Big Sur - Enforce Screen Saver TimeoutNIST macOS Big Sur v1.4.0 - 800-53r5 HighUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

OS10-RTR-000020 - The Dell OS10 BGP router must be configured to reject inbound route advertisements for any Bogon prefixes.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

ACCESS CONTROL

OS10-RTR-000050 - The Dell OS10 BGP router must be configured to reject outbound route advertisements for any prefixes that do not belong to any customers or the local autonomous system (AS).DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

ACCESS CONTROL

OS10-RTR-000060 - The Dell OS10 BGP router must be configured to reject route advertisements from BGP peers that do not list their autonomous system (AS) number as the first AS in the AS_PATH attribute.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

ACCESS CONTROL

OS10-RTR-000130 - The Dell OS10 multicast router must be configured to disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

ACCESS CONTROL

OS10-RTR-000160 - The Dell OS10 Router must be configured to have all inactive interfaces disabled.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

ACCESS CONTROL

OS10-RTR-000220 - The Dell OS10 multicast Rendezvous Point (RP) router must be configured to filter Protocol Independent Multicast (PIM) Register messages received from the Designated Router (DR) for any undesirable multicast groups and sources.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

ACCESS CONTROL

OS10-RTR-000260 - The Dell OS10 Router must be configured to log all packets that have been dropped.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

AUDIT AND ACCOUNTABILITY

OS10-RTR-000290 - The Dell OS10 Router must be configured to use encryption for routing protocol authentication.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

IDENTIFICATION AND AUTHENTICATION

OS10-RTR-000340 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000390 - The Dell OS10 Router must be configured to drop all fragmented Internet Control Message Protocol (ICMP) packets destined to itself.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000470 - The Dell OS10 out-of-band management (OOBM) gateway router must be configured to forward only authorized management traffic to the Network Operations Center (NOC).DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000480 - The Dell OS10 out-of-band management (OOBM) gateway router must be configured to block any traffic destined to itself that is not sourced from the OOBM network or the NOC.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000540 - The Dell OS10 Router must be configured to implement message authentication for all control plane protocols.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000550 - The Dell OS10 BGP router must be configured to use a unique key for each autonomous system (AS) that it peers with.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000600 - The Dell OS10 Router must not be configured to have any zero-touch deployment feature enabled when connected to an operational network.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000630 - The Dell OS10 Router must be configured to have IP directed broadcast disabled on all interfaces.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000640 - The Dell OS10 Router must be configured to have Internet Control Message Protocol (ICMP) unreachable notifications disabled on all external interfaces.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000800 - The Dell OS10 multicast Designated Router (DR) must be configured to filter the Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) Report messages to allow hosts to join only multicast groups that have been approved by the organization.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-RTR-000910 - The Dell OS10 BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.DISA Dell OS10 Switch Router STIG v1r2Dell_OS10

CONFIGURATION MANAGEMENT

VCLD-70-000001 - VAMI must limit the number of simultaneous requests.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

ACCESS CONTROL

VCLD-70-000005 - VAMI must generate log records for system startup and shutdown.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

AUDIT AND ACCOUNTABILITY

VCLD-70-000006 - VAMI must produce log records containing sufficient information to establish what type of events occurred.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

AUDIT AND ACCOUNTABILITY

VCLD-70-000008 - The rsyslog must be configured to monitor VAMI logs.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

AUDIT AND ACCOUNTABILITY

VCLD-70-000018 - VAMI must protect against or limit the effects of HTTP types of denial-of-service (DoS) attacks - Content-Type.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCLD-70-000019 - VAMI must set the encoding for all text Multipurpose Internet Mail Extensions (MIME) types to UTF-8 - cgiDISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLD-70-000019 - VAMI must set the encoding for all text Multipurpose Internet Mail Extensions (MIME) types to UTF-8 - rbDISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLD-70-000020 - VAMI must disable directory browsing.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCPG-67-000009 - VMware Postgres must limit modify privileges to authorized accounts.DISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

CONFIGURATION MANAGEMENT

VCPG-67-000015 - VMware Postgres must use FIPS 140-2 approved TLS ciphers.DISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

IDENTIFICATION AND AUTHENTICATION

VCPG-67-000016 - VMware Postgres must write log entries to disk prior to returning operation success or failure - fsyncDISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCPG-67-000016 - VMware Postgres must write log entries to disk prior to returning operation success or failure - synchronous_commitDISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCPG-67-000019 - VMware Postgres must provide non-privileged users with minimal error information.DISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCPG-67-000021 - VMware Postgres must be configured to log to stderr.DISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

AUDIT AND ACCOUNTABILITY

VCPG-67-000022 - Rsyslog must be configured to monitor VMware Postgres logs - logDISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

AUDIT AND ACCOUNTABILITY

VCPG-70-000013 - VMware Postgres must use FIPS 140-2 approved Transport Layer Security (TLS) ciphers.DISA STIG VMware vSphere 7.0 PostgreSQL v1r2Unix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

VCPG-70-000015 - VMware Postgres must not allow schema access to unauthorized accounts.DISA STIG VMware vSphere 7.0 PostgreSQL v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCPG-70-000016 - VMware Postgres must provide nonprivileged users with minimal error information.DISA STIG VMware vSphere 7.0 PostgreSQL v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCPG-70-000017 - VMware Postgres must have log collection enabled.DISA STIG VMware vSphere 7.0 PostgreSQL v1r2Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

VCPG-70-000018 - VMware Postgres must be configured to log to 'stderr'.DISA STIG VMware vSphere 7.0 PostgreSQL v1r2Unix

AUDIT AND ACCOUNTABILITY