Item Search

NameAudit NamePluginCategory
1.7.1 Ensure /etc/motd is configuredCIS Oracle Linux 8 v4.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.7.1 Ensure /etc/motd is configuredCIS Red Hat Enterprise Linux 8 v4.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.7.2 Ensure local login warning banner is configured properlyCIS CentOS Linux 8 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

1.7.2 Ensure local login warning banner is configured properly - mrsvCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.7.2 Ensure local login warning banner is configured properly - mrsvCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

1.7.3 Ensure remote login warning banner is configured properly - banner textCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.7.3 Ensure remote login warning banner is configured properly - mrsvCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.8.1.3 Ensure remote login warning banner is configured properlyCIS Fedora 19 Family Linux Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.8.1.3 Ensure remote login warning banner is configured properlyCIS Fedora 19 Family Linux Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.8.6 Ensure local login warning banner is configured properlyCIS Debian Family Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.8.6 Ensure local login warning banner is configured properlyCIS Debian Family Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.38 VCSA-80-000275CIS VMware vSphere 8.0 vCenter STIG v1.0.0 CAT IIVMware

CONFIGURATION MANAGEMENT

3.1.1 Ensure IPv6 status is identifiedCIS Red Hat Enterprise Linux 7 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.1.1 Ensure IPv6 status is identifiedCIS Debian Linux 11 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.1.1 Ensure IPv6 status is identifiedCIS Debian Linux 11 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.1.1 Ensure IPv6 status is identifiedCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.1.1 Ensure IPv6 status is identifiedCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.1.1 Ensure IPv6 status is identifiedCIS Debian Linux 10 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.5.2.3 Ensure firewall rules exist for all open portsCIS SUSE Linux Enterprise 12 v3.2.1 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

3.5.2.3 Ensure firewall rules exist for all open portsCIS SUSE Linux Enterprise 12 v3.2.1 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

3.6.2.4 Ensure IPv4 firewall rules exist for all open ports - iptablesCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

3.6.2.4 Ensure IPv4 firewall rules exist for all open ports - iptablesCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

3.6.2.4 Ensure IPv4 firewall rules exist for all open ports - ssCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

4.6 Ensure the maximum failed login attempts is set to 3CIS VMware ESXi 6.5 v1.0.0 Level 1VMware

ACCESS CONTROL

5.2.12 Ensure SSH Idle Timeout Interval is configured - ClientAliveCountMaxCIS Amazon Linux v2.1.0 L1Unix

ACCESS CONTROL

5.2.14 Ensure only strong MAC algorithms are usedCIS SUSE Linux Enterprise 12 v3.2.1 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

5.2.14 Ensure only strong MAC algorithms are usedCIS SUSE Linux Enterprise 12 v3.2.1 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

5.3.17 Ensure only strong MAC algorithms are usedCIS Amazon Linux 2 STIG v2.0.1 L1 ServerUnix

ACCESS CONTROL

5.4.1 Ensure custom authselect profile is usedCIS CentOS Linux 8 Server L1 v2.0.0Unix

SECURITY ASSESSMENT AND AUTHORIZATION, RISK ASSESSMENT

5.4.1 Ensure custom authselect profile is usedCIS Fedora 28 Family Linux Server L1 v2.0.0Unix

SECURITY ASSESSMENT AND AUTHORIZATION, RISK ASSESSMENT

6.2.16 Ensure no users have .netrc filesCIS Amazon Linux 2 STIG v2.0.1 L1 ServerUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

8.4.27 Disable VM Console Paste operationsCIS VMware ESXi 5.5 v1.2.0 Level 1VMware

CONFIGURATION MANAGEMENT

9.9 Check Permissions on User .netrc FilesCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.9 Check Permissions on User .netrc FilesCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.14 Check User Home Directory OwnershipCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

AIOS-16-013200 - The Apple iOS/iPadOS 16 must be supervised by the MDM.AirWatch - DISA Apple iOS-iPadOS 16 STIG v2r2MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AIOS-16-711500 - Apple iOS/iPadOS 16 must implement the management setting: Treat AirDrop as an unmanaged destination.AirWatch - DISA Apple iOS/iPadOS 16 BYOAD v1r2MDM

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

AIOS-17-012500 - Apple iOS/iPadOS 17 must implement the management setting: disable AirDrop.MobileIron - DISA Apple iOS/iPadOS 17 v2r2MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AIOS-18-011500 - Apple iOS/iPadOS 18 must implement the management setting: treat AirDrop as an unmanaged destination.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

IDENTIFICATION AND AUTHENTICATION

AIOS-26-011500 - Apple iOS/iPadOS 26 must implement the management setting: treat AirDrop as an unmanaged destination.AirWatch - DISA Apple iOS/iPadOS 26 v1r3MDM

IDENTIFICATION AND AUTHENTICATION

AIOS-26-013200 - The Apple iOS/iPadOS 26 must be supervised by the MDM.AirWatch - DISA Apple iOS/iPadOS 26 v1r3MDM

CONFIGURATION MANAGEMENT

ESXI-65-000039 - Active Directory ESX Admin group membership must not be used when adding ESXi hosts to Active Directory.DISA STIG VMware vSphere ESXi 6.5 v2r4VMware

IDENTIFICATION AND AUTHENTICATION

EX13-MB-000305 - Exchange Outlook Anywhere (OA) clients must use NTLM authentication to access email.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3Windows

IDENTIFICATION AND AUTHENTICATION

EX19-MB-000203 - Exchange Outlook Anywhere clients must use NTLM authentication to access email.DISA Microsoft Exchange 2019 Mailbox Server STIG v2r3Windows

IDENTIFICATION AND AUTHENTICATION

GEN000450 - The system must limit users to 10 simultaneous system logins in accordance with operational requirements.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

SYMP-AG-000360 - Symantec ProxySG providing user authentication intermediary services must implement multifactor authentication for remote access to privileged accounts such that one of the factors is provided by a device separate from the system gaining access.DISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

IDENTIFICATION AND AUTHENTICATION

SYMP-AG-000390 - Symantec ProxySG must prohibit the use of cached authenticators after 300 seconds at a minimum - LDAPDISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

IDENTIFICATION AND AUTHENTICATION

SYMP-AG-000410 - Symantec ProxySG, when configured for reverse proxy/WAF services and providing PKI-based user authentication intermediary services, must map the client certificate to the authentication server store.DISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

IDENTIFICATION AND AUTHENTICATION

VCPF-80-000005 - The vCenter Perfcharts service cookies must have secure flag set.DISA VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v2r3Unix

ACCESS CONTROL

VCWN-06-000020 - All port groups must not be configured to VLAN values reserved by upstream physical switches.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

CONFIGURATION MANAGEMENT