| 5.1.2.5 Ensure the option to remain signed in is hidden | CIS Microsoft 365 Foundations v7.0.0 L2 E3 | microsoft_azure | ACCESS CONTROL |
| 5.1.2.5 Ensure the option to remain signed in is hidden | CIS Microsoft 365 Foundations v7.0.0 L2 E5 | microsoft_azure | ACCESS CONTROL |
| 5.2.2.4 Ensure Sign-in frequency is enabled and browser sessions are not persistent for Administrative users | CIS Microsoft 365 Foundations v7.0.0 L1 E3 | microsoft_azure | ACCESS CONTROL |
| ARBA-NT-000120 - AOS must protect wireless access to the network using authentication of users and/or devices. | DISA HPE Aruba Networking AOS Wireless STIG v1r2 | ArubaOS | ACCESS CONTROL |
| ARBA-NT-000440 - AOS must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks. | DISA HPE Aruba Networking AOS Wireless STIG v1r2 | ArubaOS | SYSTEM AND COMMUNICATIONS PROTECTION |
| ARBA-NT-000800 - AOS must require devices to reauthenticate when organization-defined circumstances or situations requiring reauthentication. | DISA HPE Aruba Networking AOS Wireless STIG v1r2 | ArubaOS | IDENTIFICATION AND AUTHENTICATION |
| ARBA-NT-000850 - The network element must authenticate all network-connected endpoint devices before establishing any connection. | DISA HPE Aruba Networking AOS Wireless STIG v1r2 | ArubaOS | IDENTIFICATION AND AUTHENTICATION |
| ARBA-NT-000920 - AOS must use cryptographic algorithms approved by the National Security Agency (NSA) to protect national security systems (NSS) when transporting classified traffic across an unclassified network. | DISA HPE Aruba Networking AOS Wireless STIG v1r2 | ArubaOS | SYSTEM AND COMMUNICATIONS PROTECTION |
| RHEL-10-000550 - RHEL 10 must use a separate file system for "/var". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| RHEL-10-000570 - RHEL 10 must use a separate file system for "/var/tmp". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| RHEL-10-200070 - RHEL 10 must not have the "tftp" package installed. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | IDENTIFICATION AND AUTHENTICATION |
| RHEL-10-200611 - RHEL 10 must have the "pcscd" socket set to active. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | IDENTIFICATION AND AUTHENTICATION |
| RHEL-10-200633 - RHEL 10 must routinely check the baseline configuration for unauthorized changes and notify the system administrator when anomalies in the operation of any security functions are discovered. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| RHEL-10-200644 - RHEL 10 must authenticate the remote logging server for off-loading audit logs via "rsyslog". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| RHEL-10-200648 - RHEL 10 must use cron logging. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| RHEL-10-200690 - RHEL 10 must notify designated personnel if baseline configurations are changed in an unauthorized manner. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| RHEL-10-200692 - RHEL 10 must be configured to prevent unrestricted mail relaying. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-10-300090 - RHEL 10 cryptographic policy must not be overridden. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| RHEL-10-400005 - RHEL 10 must be configured so that the "/etc/group" file is group-owned by "root". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL |
| RHEL-10-400010 - RHEL 10 must be configured so that the "/etc/group-" file is owned by "root". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL |
| RHEL-10-400020 - RHEL 10 must be configured so that the "/etc/gshadow" file is owned by "root". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL |
| RHEL-10-400055 - RHEL 10 must be configured so that the "/etc/passwd-" file is group-owned by "root". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL |
| RHEL-10-400085 - RHEL 10 must be configured so that the "/var/log" directory is group-owned by "root". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| RHEL-10-400110 - RHEL 10 must be configured so that library files are owned by "root". | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-10-400160 - RHEL 10 must ensure that all local interactive user home directories are group-owned by the home directory owner's primary group. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| RHEL-10-400205 - RHEL 10 must enforce mode "755" or less permissive for system commands. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-10-400225 - RHEL 10 must enforce mode "0640" or less permissive for the "/var/log/messages" file. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| RHEL-10-400235 - RHEL 10 must enforce mode "0740" or less permissive for local initialization files. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL |
| RHEL-10-400260 - RHEL 10 must enforce mode "0000" or less permissive for the "/etc/gshadow-" file to prevent unauthorized access. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL |
| RHEL-10-400270 - RHEL 10 must enforce mode "0644" or less permissive for "/etc/passwd-" file to prevent unauthorized access. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL |
| RHEL-10-400295 - RHEL 10 must enforce mode "0000" for "/etc/shadow" to prevent unauthorized access. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | ACCESS CONTROL |
| VCEM-70-000001 - ESX Agent Manager must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive. | DISA STIG VMware vSphere 7.0 EAM Tomcat v1r2 | Unix | ACCESS CONTROL |
| VCEM-70-000016 - ESX Agent Manager must not have any symbolic links in the web content directory tree. | DISA STIG VMware vSphere 7.0 EAM Tomcat v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCEM-70-000022 - ESX Agent Manager must set the welcome-file node to a default web page. | DISA STIG VMware vSphere 7.0 EAM Tomcat v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCFL-67-000028 - vSphere Client must be configured with the appropriate ports. | DISA STIG VMware vSphere 6.7 Virgo Client v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-70-000002 - Lookup Service must limit the number of concurrent connections permitted. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | ACCESS CONTROL |
| VCLU-70-000016 - Lookup Service must not have any symbolic links in the web content directory tree. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCLU-70-000021 - Lookup Service must set the welcome-file node to a default web page. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCLU-70-000027 - Lookup Service must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the web server. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| VCLU-70-000028 - Lookup Service log files must be offloaded to a central log server in real time. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| VCLU-70-000029 - Lookup Service must be configured with the appropriate ports. | DISA STIG VMware vSphere 7.0 Lookup Service v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCST-70-000005 - The Security Token Service must record user access in a format that enables monitoring of remote access. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| VCST-70-000006 - The Security Token Service must generate log records during Java startup and shutdown. - bufferSize | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| VCST-70-000008 - The Security Token Service application files must be verified for their integrity. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT |
| VCST-70-000015 - The Security Token Service must be configured with memory leak protection. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCST-70-000022 - The Security Token Service must set the welcome-file node to a default web page. | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCST-70-000028 - The Security Token Service must be configured with the appropriate ports. - ssl-clientauth.https | DISA STIG VMware vSphere 7.0 STS Tomcat v1r2 | Unix | CONFIGURATION MANAGEMENT |
| VCUI-70-000001 - vSphere UI must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | ACCESS CONTROL |
| VCUI-70-000020 - vSphere UI must limit the number of allowed connections. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCUI-70-000031 - vSphere UI must disable the shutdown port. | DISA STIG VMware vSphere 7.0 vCA UI v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
