Item Search

NameAudit NamePluginCategory
1.14 CISC-ND-000390CIS Cisco IOS XE Switch NDM STIG v1.1.0 CAT IICisco

AUDIT AND ACCOUNTABILITY

1.22 CISC-RT-000280CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT ICisco

ACCESS CONTROL

1.40 WN16-00-000412CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT IIWindows

CONFIGURATION MANAGEMENT

1.40 WN19-00-000400CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

CONFIGURATION MANAGEMENT

1.40 WN19-00-000400CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

CONFIGURATION MANAGEMENT

1.40 WN22-00-000400CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIWindows

CONFIGURATION MANAGEMENT

1.40 WN22-00-000400CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIWindows

CONFIGURATION MANAGEMENT

1.97 WN16-CC-000040CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIIWindows

CONFIGURATION MANAGEMENT

1.97 WN16-CC-000040CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT IIIWindows

CONFIGURATION MANAGEMENT

1.97 WN19-CC-000030CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIIWindows

CONFIGURATION MANAGEMENT

1.97 WN22-CC-000030CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIIWindows

CONFIGURATION MANAGEMENT

1.97 WN22-CC-000030CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIIWindows

CONFIGURATION MANAGEMENT

1.98 WN16-CC-000050CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT IIIWindows

CONFIGURATION MANAGEMENT

1.98 WN19-CC-000040CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIIWindows

CONFIGURATION MANAGEMENT

1.98 WN22-CC-000040CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIIWindows

CONFIGURATION MANAGEMENT

1.98 WN22-CC-000040CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIIWindows

CONFIGURATION MANAGEMENT

2.1 Configure TCP WrappersCIS Oracle Solaris 11.4 L1 v1.1.0Unix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.4.5 Disable Remote LoginCIS Apple OSX 10.10 Yosemite L1 v1.2.0Unix

ACCESS CONTROL

3.5.2.1 Ensure IPv6 default deny firewall policy - Chain INPUTCIS Aliyun Linux 2 L1 v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.5.2.1 Ensure IPv6 default deny firewall policy - Chain OUTPUTCIS Aliyun Linux 2 L1 v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.12 Set Strict Multihoming - current ipv6 = 1CIS Solaris 11.2 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.12 Set Strict Multihoming - persistent ipv6 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.1 Detect Botnet connectionsCIS Fortigate 7.0.x v1.4.0 L2FortiGate

SYSTEM AND INFORMATION INTEGRITY

4.1.1 Detect Botnet connectionsCIS FortiGate 7.4.x v1.0.1 L2FortiGate

SYSTEM AND INFORMATION INTEGRITY

4.7 Enable IPtablesCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

5.5.1.8 Ensure password expiration is 60 Day maximum for existing passwordsCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

GEN003960 - The traceroute command owner must be root.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN003960 - The traceroute command owner must be root.DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN003960 - The traceroute command owner must be root.DISA STIG Solaris 10 SPARC v2r4Unix

CONFIGURATION MANAGEMENT

GOOG-17-005800 - Google Android 17 must be configured to not display the following (work profile) notifications when the device is locked: [selection:MobileIron - DISA Google Android 17 COBO STIG v1r1MDM

ACCESS CONTROL

GOOG-17-005800 - Google Android 17 must be configured to not display the following (work profile) notifications when the device is locked: [selection:MobileIron - DISA Google Android 17 COPE STIG v1r1MDM

ACCESS CONTROL

SonicWALL - Flood Protection - Layer 2 - WAN machinesTNS SonicWALL v5.9SonicWALL

SYSTEM AND COMMUNICATIONS PROTECTION

SonicWALL - Flood Protection - Layer 3 - Attack ThresholdTNS SonicWALL v5.9SonicWALL

SYSTEM AND COMMUNICATIONS PROTECTION

TCAT-AS-000750 - Tomcat must use FIPS-validated ciphers on secured connectors.DISA STIG Apache Tomcat Application Server 9 v3r4 MiddlewareUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

WN10-00-000170 - The Server Message Block (SMB) v1 protocol must be disabled on the SMB client.DISA Microsoft Windows 10 STIG v3r6Windows

CONFIGURATION MANAGEMENT

WN10-UR-000085 - The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.DISA Microsoft Windows 10 STIG v3r6Windows

ACCESS CONTROL

WN11-UR-000085 - The 'Deny log on locally' user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.DISA Microsoft Windows 11 STIG v2r11Windows

ACCESS CONTROL

WN16-00-000412 - The Server Message Block (SMB) v1 protocol must be disabled on the SMB client.DISA Microsoft Windows Server 2016 STIG v2r10Windows

CONFIGURATION MANAGEMENT

WN16-CC-000040 - Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing.DISA Microsoft Windows Server 2016 STIG v2r10Windows

CONFIGURATION MANAGEMENT

WN19-00-000400 - Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000030 - Windows Server 2019 Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN19-CC-000040 - Windows Server 2019 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing.DISA Microsoft Windows Server 2019 STIG v3r9Windows

CONFIGURATION MANAGEMENT

WN22-00-000400 - Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000030 - Windows Server 2022 Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000040 - Windows Server 2022 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN22-CC-000040 - Windows Server 2022 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN25-00-000400 - Windows Server 2025 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000030 - Windows Server 2025 Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000040 - Windows Server 2025 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing.DISA Microsoft Windows Server 2025 STIG v1r4Windows

CONFIGURATION MANAGEMENT

WN25-CC-000040 - Windows Server 2025 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT