| VCEM-70-000031 - ESX Agent Manager must be configured with the appropriate ports. | DISA STIG VMware vSphere 7.0 EAM Tomcat v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-70-000004 - Lookup Service must protect cookies from cross-site scripting (XSS) - XSS. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| VCLU-70-000008 - Lookup Service application files must be verified for their integrity. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-70-000011 - Lookup Service must be configured to limit access to internal packages. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-70-000013 - Lookup Service must have mappings set for Java servlet pages. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-70-000015 - Lookup Service must be configured with memory leak protection. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-70-000017 - Lookup Service directory tree must have permissions in an out-of-the-box state - out-of-the box state. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| VCLU-70-000026 - Lookup Service must have the debug option turned off. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCLU-70-000030 - Lookup Service must disable the shutdown port. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCLU-70-000031 - Lookup Service must set the secure flag for cookies. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCST-70-000001 - The Security Token Service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | ACCESS CONTROL |
| VCST-70-000016 - The Security Token Service must not have any symbolic links in the web content directory tree. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCST-70-000023 - The Security Token Service must not show directory listings. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCST-70-000024 - The Security Token Service must be configured to not show error reports. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCST-70-000025 - The Security Token Service must not enable support for TRACE requests. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCST-70-000050 - Security Token Service log data and records must be backed up onto a different system or media. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| VCUI-70-000010 - vSphere UI must not be configured with the 'UserDatabaseRealm' enabled. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-70-000011 - vSphere UI must be configured to limit access to internal packages. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-70-000013 - vSphere UI must have mappings set for Java servlet pages. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-70-000016 - vSphere UI must not have any symbolic links in the web content directory tree. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-70-000018 - vSphere UI must restrict its cookie path. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000027 - vSphere UI must have the debug option turned off. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCUI-70-000028 - vSphere UI must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the web server. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| ZEBR-13-006000 - Zebra Android 13 must be configured to enforce a minimum password length of six characters. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-13-006100 - Zebra Android 13 must be configured to not allow passwords that include more than four repeating or sequential characters - Alphanumeric | MobileIron - DISA Zebra Android 13 COPE STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-13-006100 - Zebra Android 13 must be configured to not allow passwords that include more than four repeating or sequential characters - Complex Characters | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-13-006100 - Zebra Android 13 must be configured to not allow passwords that include more than four repeating or sequential characters - Numbers | AirWatch - DISA Zebra Android 13 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-13-006100 - Zebra Android 13 must be configured to not allow passwords that include more than four repeating or sequential characters - Numbers | AirWatch - DISA Zebra Android 13 COPE STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-13-006300 - Zebra Android 13 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | ACCESS CONTROL |
| ZEBR-13-006300 - Zebra Android 13 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity. | MobileIron - DISA Zebra Android 13 COPE STIG v1r2 | MDM | ACCESS CONTROL |
| ZEBR-13-006500 - Zebra Android 13 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, MDM server, mobile application store]. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-006700 - Zebra Android 13 allowlist must be configured to not include applications with the following characteristics: | AirWatch - DISA Zebra Android 13 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-13-006700 - Zebra Android 13 allowlist must be configured to not include applications with the following characteristics: | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-13-006800 - Zebra Android 13 must be configured to not display the following (work profile) notifications when the device is locked: [selection: | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | ACCESS CONTROL |
| ZEBR-13-008600 - Zebra Android 13 must be configured to not allow backup of [all applications, configuration data] to remote systems. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| ZEBR-13-009500 - Zebra Android 13 must be configured to disable ad hoc wireless client-to-client connection capability. | AirWatch - DISA Zebra Android 13 COBO STIG v1r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| ZEBR-13-009500 - Zebra Android 13 must be configured to disable ad hoc wireless client-to-client connection capability. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| ZEBR-13-009500 - Zebra Android 13 must be configured to disable ad hoc wireless client-to-client connection capability. | AirWatch - DISA Zebra Android 13 COPE STIG v1r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| ZEBR-13-009800 - Zebra Android 13 users must complete required training. | AirWatch - DISA Zebra Android 13 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-009900 - Zebra Android 13 must be configured to enforce that Wi-Fi Sharing is disabled. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-009900 - Zebra Android 13 must be configured to enforce that Wi-Fi Sharing is disabled. | AirWatch - DISA Zebra Android 13 COPE STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-010100 - The Zebra Android 13 work profile must be configured to prevent users from adding personal email accounts to the work email app. | AirWatch - DISA Zebra Android 13 COPE STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-010200 - The Zebra Android 13 work profile must be configured to enforce the system application disable list. | AirWatch - DISA Zebra Android 13 COPE STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-010500 - The Zebra Android 13 work profile must be configured to disable the autofill services. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-010800 - Android 13 devices must have the latest available Zebra Android 13 operating system installed. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-010800 - Android 13 devices must have the latest available Zebra Android 13 operating system installed. | AirWatch - DISA Zebra Android 13 COPE STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-010900 - Android 13 devices must be configured to disable the use of third-party keyboards. | AirWatch - DISA Zebra Android 13 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-010900 - Android 13 devices must be configured to disable the use of third-party keyboards. | MobileIron - DISA Zebra Android 13 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-010900 - Android 13 devices must be configured to disable the use of third-party keyboards. | AirWatch - DISA Zebra Android 13 COPE STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-13-012200 - Zebra Android 13 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)] - for example, USB]. | AirWatch - DISA Zebra Android 13 COBO STIG v1r2 | MDM | ACCESS CONTROL |
