Item Search

NameAudit NamePluginCategory
1.1.30 Ensure that the API Server only makes use of Strong Cryptographic CiphersCIS Kubernetes 1.13 Benchmark v1.4.1 L1Unix

IDENTIFICATION AND AUTHENTICATION

1.2.1 Set the 'hostname'CIS Cisco IOS XR 7.x v1.0.0 L1Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.2 Set 'modulus' to greater than or equal to 2048 for 'crypto key generate rsa'CIS Cisco IOS XR 7.x v1.0.0 L1Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.2 Set 'transport input ssh' for 'line vty' connectionsCIS Cisco IOS 15 L1 v4.1.1Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.2 Set 'transport input ssh' for 'line vty' connectionsCIS Cisco IOS 16 L1 v2.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.2 Set 'transport input ssh' for 'line vty' connectionsCIS Cisco IOS 17 L1 v2.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.3 Set 'seconds' for 'ssh timeout' for 60 seconds or lessCIS Cisco IOS XR 7.x v1.0.0 L1Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.7 Ensure Multifactor Authentication is Required to access Microsoft Admin PortalsCIS Microsoft Azure Foundations v2.1.0 L1microsoft_azure

IDENTIFICATION AND AUTHENTICATION

1.4.3 Configure SNMPv3 - engineIDCIS Cisco NX-OS L1 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.4.3 Configure SNMPv3 - engineIDCIS Cisco NX-OS L2 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.4.3 Configure SNMPv3 - group v3CIS Cisco NX-OS L2 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.4.3 Configure SNMPv3 - group v3CIS Cisco NX-OS L1 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.5.8 Require 'aes 128' as minimum for 'snmp-server user' when using SNMPv3CIS Cisco IOS XR 7.x v1.0.0 L2Cisco

IDENTIFICATION AND AUTHENTICATION

1.5.9 Set 'priv' for each 'snmp-server group' using SNMPv3CIS Cisco IOS 16 L2 v2.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.5.10 Require 'aes 128' as minimum for 'snmp-server user' when using SNMPv3CIS Cisco IOS 12 L2 v4.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.5.10 Require 'aes 128' as minimum for 'snmp-server user' when using SNMPv3CIS Cisco IOS 16 L2 v2.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1 Ensure 'SECURE_CONTROL_' Is Set In 'listener.ora'CIS Oracle Server 18c Linux v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

2.1.1 Ensure 'SECURE_CONTROL_' Is Set In 'listener.ora'CIS Oracle Server 18c Windows v1.1.0Windows

IDENTIFICATION AND AUTHENTICATION

2.1.1 Ensure 'SECURE_CONTROL_' Is Set In 'listener.ora'CIS Oracle Server 12c Windows v3.0.0Windows

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.1 Set the 'hostname'CIS Cisco IOS 16 L1 v2.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.2 Set the 'ip domain-name'CIS Cisco IOS 16 L1 v2.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.4 Set 'seconds' for 'ip ssh timeout' for 60 seconds or lessCIS Cisco IOS 16 L1 v2.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.4 Set 'seconds' for 'ip ssh timeout' for 60 seconds or lessCIS Cisco IOS 17 L1 v2.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.2.2 Ensure rsh client is not installedCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.4 Ensure telnet client is not installedCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.4 Ensure telnet client is not installedCIS Debian Family Server L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.4 Ensure telnet client is not installedCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3.1.1 Set 'ntp authenticate'CIS Cisco IOS 15 L2 v4.0.1Cisco

IDENTIFICATION AND AUTHENTICATION

2.3.1.1 Set 'ntp authenticate'CIS Cisco IOS 16 L2 v1.1.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.3.2 Ensure rsh client is not installedCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3.4 Ensure telnet client is not installedCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

3.6.1.5 Ensure SSH PermitEmptyPasswords is disabledCIS IBM AIX 7.1 L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

3.6.1.6 Configuring SSH - disallow host based authenticationCIS IBM AIX 7.1 L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 15 OS v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 10 OS v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 9.6 OS v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctly - local UNIX Domain Socket is configured correctlyCIS PostgreSQL 13 OS v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

5.2.2.1 Ensure multifactor authentication is enabled for all users in administrative rolesCIS Microsoft 365 Foundations E3 L1 v3.0.0microsoft_azure

IDENTIFICATION AND AUTHENTICATION

6.6.13 Ensure SSH Key Authentication is not set for User LoginsCIS Juniper OS Benchmark v2.1.0 L1Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.1.6 Ensure Strong Ciphers are set for SSHCIS Juniper OS Benchmark v2.1.0 L1Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.1.7 Ensure Only Suite B Ciphers are set for SSH - ciphers restrictionCIS Juniper OS Benchmark v2.1.0 L2Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.1.7 Ensure Only Suite B Ciphers are set for SSH - weak ciphersCIS Juniper OS Benchmark v2.1.0 L2Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.1.9 Ensure Strong Key Exchange Methods are set for SSHCIS Juniper OS Benchmark v2.1.0 L1Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.1.12 Ensure Only Suite B Based Key Signing Algorithms are set for SSH - ECDSA KeyCIS Juniper OS Benchmark v2.1.0 L2Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.2.1 Ensure Web-Management is not Set to HTTPCIS Juniper OS Benchmark v2.1.0 L1Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.2.4 Ensure Idle Timeout is Set for Web-ManagementCIS Juniper OS Benchmark v2.1.0 L1Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.5.4 Ensure REST HTTPS is Set to use Mutual AuthenticationCIS Juniper OS Benchmark v2.1.0 L2Juniper

IDENTIFICATION AND AUTHENTICATION

6.10.5.5 Ensure REST HTTPS Cipher List is SetCIS Juniper OS Benchmark v2.1.0 L1Juniper

IDENTIFICATION AND AUTHENTICATION

18.9.15.2 (L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

IDENTIFICATION AND AUTHENTICATION

18.10.9.2.9 Ensure 'Require additional authentication at startup' is set to 'Enabled'CIS Microsoft Intune for Windows 11 v2.0.0 L1 + BLWindows

IDENTIFICATION AND AUTHENTICATION