Item Search

NameAudit NamePluginCategory
AADC-CL-000280 - Adobe Acrobat Pro DC Classic access to unknown websites must be restricted.DISA STIG Adobe Acrobat Pro DC Classic Track v2r1Windows

CONFIGURATION MANAGEMENT

APPL-26-000001 - The macOS system must prevent Apple Watch from terminating a session lock.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000003 - The macOS system must enforce session lock no more than five seconds after screen saver is started.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000012 - The macOS system must automatically remove or disable temporary or emergency user accounts within 72 hours.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000022 - The macOS system must limit consecutive failed login attempts to three.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000024 - The macOS system must enforce SSH to display a policy banner.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000052 - The macOS system must configure SSHD ClientAliveCountMax to 1.DISA Apple macOS 26 Tahoe STIG v1r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-26-000070 - The macOS system must enforce screen saver timeout.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000090 - The macOS system must disable login to other users' active and locked sessions.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-000140 - The macOS system must set SSH Active Server Alive Maximum to 0.DISA Apple macOS 26 Tahoe STIG v1r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-26-001003 - The macOS system must enable security auditing.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-26-001017 - The macOS system must configure audit log folders to mode 700 or less permissive.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

APPL-26-001021 - The macOS system must be configured to audit all changes of object attributes.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-26-001031 - The macOS system must configure audit failure notification.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

APPL-26-001120 - The macOS system must configure audit_control owner to root.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

APPL-26-001130 - The macOS system must configure audit_control owner to mode 440 or less permissive.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

APPL-26-002003 - The macOS system must disable Network File System (NFS) service.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-002010 - The macOS system must disable FaceTime.app.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002013 - The macOS system must disable iCloud Reminders.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002017 - The macOS system must disable the camera.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002024 - The macOS system must disable sending search data from Spotlight to Apple.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002040 - The macOS system must disable iCloud Keychain Sync.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002052 - The macOS system must disable the System Settings pane for Wallet and Apple Pay.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002068 - The macOS system must secure users' home folders.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002069 - The macOS system must require an administrator password to modify systemwide preferences.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-002080 - The macOS system must disable Airplay Receiver.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-26-002090 - The macOS system must disable TouchID for unlocking the device.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-002100 - The macOS system must disable Media Sharing.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-002140 - The macOS system must disable Content Caching service.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002260 - The macOS system must disable the Bluetooth System Settings pane.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-003051 - The macOS system must enforce multifactor authentication for the su command.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-003070 - The macOS system must set minimum password lifetime to 24 hours.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-004001 - The macOS system must configure Apple System Log (ASL) files owned by root and group to wheel.DISA Apple macOS 26 Tahoe STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-26-005054 - The macOS system must disable the TouchID prompt during Setup Assistant.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-005170 - The macOS system must disable Apple Intelligence during Setup Assistant.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

VCTR-67-000008 - The vCenter Server must provide an immediate real-time alert to the SA and ISSO, at a minimum, of all audit failure events.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

AUDIT AND ACCOUNTABILITY

VCTR-67-000016 - The vCenter Server must only send NetFlow traffic to authorized collectors.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000024 - The vCenter Server must configure the vpxuser password meets length policy.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000035 - vCenter Server plugins must be verified.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000036 - The vCenter Server must produce audit records containing information to establish what type of events occurred.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

SYSTEM AND INFORMATION INTEGRITY

VCTR-67-000040 - The vCenter Server passwords must contain at least one uppercase character.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

IDENTIFICATION AND AUTHENTICATION

VCTR-67-000041 - The vCenter Server passwords must contain at least one lowercase character.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

IDENTIFICATION AND AUTHENTICATION

VCTR-67-000047 - The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

ACCESS CONTROL

VCTR-67-000054 - The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List by use of an external proxy server.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000058 - The vCenter Server Machine SSL certificate must be issued by a DoD certificate authority.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000064 - The vCenter Server must restrict access to cryptographic permissions.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000068 - The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an SSO identity source.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000072 - The vCenter Server services must be ran using a service account instead of a built-in Windows account.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000075 - The vCenter Server must enable all tasks to be shown to Administrators in the Web Client.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT

VCTR-67-000078 - The vCenter Server must disable Password and Windows integrated authentication.DISA STIG VMware vSphere 6.7 vCenter v1r4VMware

CONFIGURATION MANAGEMENT