Item Search

NameAudit NamePluginCategory
1.2 Password Security Policy - c) Configure 'strong-password dictionary' and 'same-consecutive' to avoid weak password - same-consecutiveTenable ZTE JINOSZTE_JINOS

IDENTIFICATION AND AUTHENTICATION

1.2 Password Security Policy - d) Check either of the following words exist in configuration fileTenable ZTE JINOSZTE_JINOS

IDENTIFICATION AND AUTHENTICATION

1.2 Password Security Policy - d) Display password in cipher textTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.2 Password Security Policy - e) Check for strong-password max-lengthTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.2 Password Security Policy - e) Check for strong-password max-lengthTenable ZTE JINOSZTE_JINOS

IDENTIFICATION AND AUTHENTICATION

1.2 Password Security Policy - e) Check for strong-password max-length - strong-password date-check enableTenable ZTE JINOSZTE_JINOS

IDENTIFICATION AND AUTHENTICATION

1.2 Password Security Policy - e) Check for strong-password max-length - strong-password username-related-chk inverseTenable ZTE JINOSZTE_JINOS

IDENTIFICATION AND AUTHENTICATION

1.2 Password Security Policy - e) Check for strong-password username-related-chk inverseTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.2 Password Security Policy - f) The validity period of an account can be configuredTenable ZTE JINOSZTE_JINOS

IDENTIFICATION AND AUTHENTICATION

1.2 Password Security Policy - f) The validity period of an account can be configuredTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.3 Account Anti-riot AttackTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.4 SNMP Security - c) SNMP Security Protection FunctionTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.5 FTP/SFTP Access AuthorizationTenable ZTE JINOSZTE_JINOS

CONFIGURATION MANAGEMENT

1.5 FTP/SFTP Access Authorization - login-type-allowedTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.5 FTP/SFTP Access Authorization - sftp top-directoryTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.6 Support Web Access Security - a) ciphersuiteTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.6 Support Web Access Security - a) ciphersuiteTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.6 Support Web Access Security - c) versionTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.7 Log AuditingTenable ZTE ROSNG Best PracticesZTE_ROSNG

AUDIT AND ACCOUNTABILITY

1.8 SSH Strong Algorithm - a) Disable encryption noneTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.8 SSH Strong Algorithm - b) Disable encryption 3des-cbcTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.8 SSH Strong Algorithm - c) Disable encryption aes128-cbcTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.8 SSH Strong Algorithm - d) Disable encryption aes192-cbcTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.8 SSH Strong Algorithm - d) Disable encryption aes192-cbcTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.8 SSH Strong Algorithm - e) Disable encryption aes256-cbcTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.8 SSH Strong Algorithm - f) Disable encryption blowfish-cbcTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.8 SSH Strong Algorithm - g) Disable hmac md5Tenable ZTE ROSNG Best PracticesZTE_ROSNG
1.8 SSH Strong Algorithm - h) Disable hmac noneTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.8 SSH Strong Algorithm - h) Disable hmac noneTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.8 SSH Strong Algorithm - j) Disable diffie-hellman group1-sha1Tenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.9 SSL Strong Algorithm - b) ciphersuiteTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

1.9 SSL Strong Algorithm - c) pki-profileTenable ZTE ROSNG Best PracticesZTE_ROSNG
1.9 SSL Strong Algorithm - c) pki-profileTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

2.1 Protection Policy for the CPS Control EngineTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

2.2 NTP Security Protection - b) NTP access-groupTenable ZTE ROSNG Best PracticesZTE_ROSNG

AUDIT AND ACCOUNTABILITY

2.2 NTP Security Protection - b) NTP access-groupTenable ZTE JINOSZTE_JINOS

SYSTEM AND COMMUNICATIONS PROTECTION

2.3 Disable the Proxy ARP Function - a) No proxyTenable ZTE ROSNG Best PracticesZTE_ROSNG
2.3 Disable the Proxy ARP Function - a) No proxyTenable ZTE JINOSZTE_JINOS

CONFIGURATION MANAGEMENT

2.3 Disable the Proxy ARP Function - b) No inter-vlan-proxyTenable ZTE JINOSZTE_JINOS

CONFIGURATION MANAGEMENT

2.3 Disable the Proxy ARP Function - c) No proxy localTenable ZTE JINOSZTE_JINOS

CONFIGURATION MANAGEMENT

2.3 Disable the Proxy ARP Function - d) No local-proxy-arpTenable ZTE ROSNG Best PracticesZTE_ROSNG
2.5 Product Default BannerTenable ZTE JINOSZTE_JINOS

ACCESS CONTROL

3.1 Authentication and Verification of OSPF Routing Protocols - message-digest-keyTenable ZTE JINOSZTE_JINOS

IDENTIFICATION AND AUTHENTICATION

3.1 Authentication and Verification of OSPFv2 Routing Protocols - authentication message-digest-key/keychainTenable ZTE ROSNG Best PracticesZTE_ROSNG
3.2 Authentication and Verification of ISIS Routing Protocols - authentication-type hmac-md5/authentication-keychainTenable ZTE ROSNG Best PracticesZTE_ROSNG
3.3 Authentication and Verification of BGP Routing ProtocolsTenable ZTE JINOSZTE_JINOS

IDENTIFICATION AND AUTHENTICATION

6.3 Mask and zone SAN resources appropriatelyCIS VMware ESXi 5.5 v1.2.0 Level 1VMware
Management Services Security - Community strings and USM passwords should be difficult to guess and should follow a policy - communityJuniper Hardening JunOS 12 Devices ChecklistJuniper

IDENTIFICATION AND AUTHENTICATION

O19C-00-010800 - The Oracle Database data files, transaction logs and audit files must be stored in dedicated directories or disk partitions separate from software or other application files.DISA Oracle Database 19c STIG v1r3 OracleDBOracleDB

CONFIGURATION MANAGEMENT

O121-BP-025100 - The DBMS data files, transaction logs and audit files must be stored in dedicated directories or disk partitions separate from software or other application files.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

CONFIGURATION MANAGEMENT