Item Search

NameAudit NamePluginCategory
AIOS-18-013400 - The Apple iOS must be configured to disable automatic transfer of diagnostic data to an external device other than an MDM service with which the device has enrolled.MobileIron - DISA Apple iOS/iPadOS 18 v1r4MDM

SYSTEM AND COMMUNICATIONS PROTECTION

AIOS-18-016800 - Apple iOS/iPadOS 18 must disable AirPrint: Allow storage of AirPrint credentials in Keychain.MobileIron - DISA Apple iOS/iPadOS 18 v1r4MDM

CONFIGURATION MANAGEMENT

AIOS-18-017000 - Apple iOS/iPadOS 18 must disable Allowed Content Ratings (Movies).MobileIron - DISA Apple iOS/iPadOS 18 v1r4MDM

CONFIGURATION MANAGEMENT

AIOS-18-017300 - Apple iOS/iPadOS 18 must disable the Apple Intelligence feature: Image Generation.MobileIron - DISA Apple iOS/iPadOS 18 v1r4MDM

CONFIGURATION MANAGEMENT

AIOS-18-017400 - Apple iOS/iPadOS 18 must disable the Apple Intelligence feature: generate new Genmoji.MobileIron - DISA Apple iOS/iPadOS 18 v1r4MDM

CONFIGURATION MANAGEMENT

ARST-RT-000150 - The Arista router must be configured to have all inactive interfaces disabled.DISA STIG Arista MLS EOS 4.x Router v2r2Arista

ACCESS CONTROL

ARST-RT-000580 - The multicast Rendezvous Point (RP) Arista router must be configured to limit the multicast forwarding cache so that its resources are not saturated by managing an overwhelming number of Protocol Independent Multicast (PIM) and Multicast Source Discovery Protocol (MSDP) source-active entries.DISA STIG Arista MLS EOS 4.x Router v2r2Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-RT-000600 - The Arista BGP router must be configured to enable the Generalized TTL Security Mechanism (GTSM).DISA STIG Arista MLS EOS 4.x Router v2r2Arista

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000236 - The Cisco router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.DISA Cisco IOS XR Router RTR STIG v3r2Cisco

CONFIGURATION MANAGEMENT

GOOG-11-000500 - Google Android 11 must be configured to not allow more than ten consecutive failed authentication attempts.AirWatch - DISA Google Android 11 COBO v2r1MDM

ACCESS CONTROL

GOOG-11-000500 - Google Android 11 must be configured to not allow more than ten consecutive failed authentication attempts.MobileIron - DISA Google Android 11 COBO v2r1MDM

ACCESS CONTROL

GOOG-11-003400 - Google Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.MobileIron - DISA Google Android 11 COPE v2r1MDM

ACCESS CONTROL

GOOG-11-006100 - Google Android 11 must be configured to generate audit records for the following auditable events: detected integrity violations.AirWatch - DISA Google Android 11 COPE v2r1MDM

AUDIT AND ACCOUNTABILITY

GOOG-11-011100 - Google Android 11 devices must be configured to enable Common Criteria Mode (CC Mode).AirWatch - DISA Google Android 11 COBO v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-011100 - Google Android 11 devices must be configured to enable Common Criteria Mode (CC Mode).AirWatch - DISA Google Android 11 COPE v2r1MDM

CONFIGURATION MANAGEMENT

HONW-09-000500 - The Honeywell Mobility Edge Android Pie device must be configured to not allow more than 10 consecutive failed authentication attempts.AirWatch - DISA Honeywell Android 9.x COBO v1r2MDM

ACCESS CONTROL

HONW-09-003400 - The Honeywell Mobility Edge Android Pie device must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.MobileIron - DISA Honeywell Android 9.x COBO v1r2MDM

ACCESS CONTROL

HONW-13-010900 - Android 13 devices must be configured to disable the use of third-party keyboards.AirWatch - DISA Honeywell Android 13 COPE v1r1MDM

CONFIGURATION MANAGEMENT

HONW-13-011000 - Android 13 devices must be configured to enable Common Criteria (CC) mode.MobileIron - DISA Honeywell Android 13 COPE v1r1MDM

CONFIGURATION MANAGEMENT

HONW-13-011000 - Android 13 devices must be configured to enable Common Criteria (CC) mode.AirWatch - DISA Honeywell Android 13 COBO v1r1MDM

CONFIGURATION MANAGEMENT

HONW-13-011000 - Android 13 devices must be configured to enable Common Criteria (CC) mode.AirWatch - DISA Honeywell Android 13 COPE v1r1MDM

CONFIGURATION MANAGEMENT

JUEX-L2-000150 - The Juniper EX switch must be configured to enable Storm Control on all host-facing access interfaces.DISA Juniper EX Series Layer 2 Switch v2r3Juniper

CONFIGURATION MANAGEMENT

MOTO-09-000500 - The Motorola Android Pie must be configured to not allow more than 10 consecutive failed authentication attempts.MobileIron - DISA Motorola Android Pie.x COBO v1r2MDM

ACCESS CONTROL

MOTO-09-000500 - The Motorola Android Pie must be configured to not allow more than 10 consecutive failed authentication attempts.MobileIron - DISA Motorola Android Pie.x COPE v1r2MDM

ACCESS CONTROL

MOTO-09-003400 - The Motorola Android Pie must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.MobileIron - DISA Motorola Android Pie.x COBO v1r2MDM

ACCESS CONTROL

MOTO-09-003400 - The Motorola Android Pie must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.MobileIron - DISA Motorola Android Pie.x COPE v1r2MDM

ACCESS CONTROL

MOTO-09-006100 - The Motorola Android Pie must be configured to generate audit records for the following auditable events: detected integrity violations.AirWatch - DISA Motorola Android Pie.x COPE v1r2MDM

AUDIT AND ACCOUNTABILITY

MOTS-11-000500 - Motorola Solutions Android 11 must be configured to not allow more than ten consecutive failed authentication attempts.MobileIron - DISA Motorola Solutions Android 11 COBO v1r3MDM

ACCESS CONTROL

MOTS-11-003400 - Motorola Solutions Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.AirWatch - DISA Motorola Solutions Android 11 COBO v1r3MDM

ACCESS CONTROL

MOTS-11-003400 - Motorola Solutions Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.MobileIron - DISA Motorola Solutions Android 11 COBO v1r3MDM

ACCESS CONTROL

MOTS-11-006100 - Motorola Solutions Android 11 must be configured to generate audit records for the following auditable events: Detected integrity violations.MobileIron - DISA Motorola Solutions Android 11 COBO v1r3MDM

AUDIT AND ACCOUNTABILITY

OL08-00-010375 - OL 8 must restrict access to the kernel message buffer.DISA Oracle Linux 8 STIG v2r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OL08-00-010541 - OL 8 must use a separate file system for "/var/log".DISA Oracle Linux 8 STIG v2r4Unix

CONFIGURATION MANAGEMENT

OL08-00-040004 - OL 8 must enable mitigations against processor-based vulnerabilities.DISA Oracle Linux 8 STIG v2r4Unix

CONFIGURATION MANAGEMENT

OL08-00-040300 - The OL 8 file integrity tool must be configured to verify extended attributes.DISA Oracle Linux 8 STIG v2r4Unix

CONFIGURATION MANAGEMENT

OL09-00-000304 - OL 9 must be configured so that the file integrity tool verifies extended attributes.DISA Oracle Linux 9 STIG v1r2Unix

CONFIGURATION MANAGEMENT

OL09-00-002415 - OL 9 must limit the number of concurrent sessions to ten for all accounts and/or account types.DISA Oracle Linux 9 STIG v1r2Unix

ACCESS CONTROL

RHEL-08-020024 - RHEL 8 must limit the number of concurrent sessions to ten for all accounts and/or account types.DISA Red Hat Enterprise Linux 8 STIG v2r3Unix

ACCESS CONTROL

RHEL-08-040022 - RHEL 8 must disable the controller area network (CAN) protocol.DISA Red Hat Enterprise Linux 8 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-08-040300 - The RHEL 8 file integrity tool must be configured to verify extended attributes.DISA Red Hat Enterprise Linux 8 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-08-040310 - The RHEL 8 file integrity tool must be configured to verify Access Control Lists (ACLs).DISA Red Hat Enterprise Linux 8 STIG v2r3Unix

CONFIGURATION MANAGEMENT

UBTU-20-010453 - The Ubuntu operating system must display the date and time of the last successful account logon upon logon.DISA Canonical Ubuntu 20.04 LTS STIG v2r3Unix

ACCESS CONTROL

UBTU-22-215025 - Ubuntu 22.04 LTS must not have the "ntp" package installed.DISA Canonical Ubuntu 22.04 LTS STIG v2r5Unix

CONFIGURATION MANAGEMENT

UBTU-22-653035 - Ubuntu 22.04 LTS must allocate audit record storage capacity to store at least one weeks' worth of audit records, when audit records are not immediately sent to a central audit record storage facility.DISA Canonical Ubuntu 22.04 LTS STIG v2r5Unix

AUDIT AND ACCOUNTABILITY

UBTU-24-300024 - Ubuntu 24.04 LTS must display the date and time of the last successful account logon upon logon.DISA Canonical Ubuntu 24.04 LTS STIG v1r2Unix

CONFIGURATION MANAGEMENT

UBTU-24-600140 - Ubuntu 24.04 LTS must restrict access to the kernel message buffer.DISA Canonical Ubuntu 24.04 LTS STIG v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

WN11-CC-000170 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled.DISA Microsoft Windows 11 STIG v2r4Windows

CONFIGURATION MANAGEMENT

WN11-CC-000220 - File Explorer heap termination on corruption must be disabled.DISA Microsoft Windows 11 STIG v2r4Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-CC-000060 - Windows Server 2022 must be configured to ignore NetBIOS name release requests except from WINS servers.DISA Microsoft Windows Server 2022 STIG v2r4Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-SO-000370 - Windows Server 2022 default permissions of global system objects must be strengthened.DISA Microsoft Windows Server 2022 STIG v2r4Windows

CONFIGURATION MANAGEMENT