Item Search

NameAudit NamePluginCategory
2.0 Install & Config - 'Disable SNMPv3'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

2.0 Install & Config - 'Disable SSHv1'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

2.0 Install & Config - 'Disable SSLv2'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.0 Install & Config - 'Disable Telnet'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

2.0 Install & Config - 'Enable SSHv2'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

2.1 Enable Secure Admin Access - 'autologout.telnet.timeout <= 5'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

2.1 Enable Secure Admin Access - 'ssh.passwd_auth.enable = on'TNS NetApp Data ONTAP 7GNetApp

IDENTIFICATION AND AUTHENTICATION

2.1 Enable Secure Admin Access - 'ssh.pubkey_auth.enable = on'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

2.1 Enable Secure Admin Access - 'telnet.distinct.enable = on'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

2.4 Password Security - 'minimum password age >= 1'TNS NetApp Data ONTAP 7GNetApp

IDENTIFICATION AND AUTHENTICATION

2.4 Password Security - 'security.passwd.lockout.numtries = 6'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

2.4 Password Security - 'security.passwd.rules.everyone = on'TNS NetApp Data ONTAP 7GNetApp

IDENTIFICATION AND AUTHENTICATION

2.5 Autologout - 'autologout.console.timeout <= 5'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

2.6 Logging - 'auditlog.enable = on'TNS NetApp Data ONTAP 7GNetApp

AUDIT AND ACCOUNTABILITY

2.8 Protocol Access Controls - 'interface.blocked.cifs has been configured'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'interface.blocked.cifs is not blank'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'interface.blocked.ftpd has been configured'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'interface.blocked.ftpd is not blank'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'interface.blocked.iscsi is not blank'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'interface.blocked.ndmp has been configured'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'interface.blocked.ndmp is not blank'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'interface.blocked.nfs has been configured'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'rsh.access has been configured'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Protocol Access Controls - 'telnet.access has been configured'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

3.1 Storage System (Hardware) Management - 'Change the root account password after each use'TNS NetApp Data ONTAP 7GNetApp
3.1 Storage System (Hardware) Management - 'FW version >= 4.0'TNS NetApp Data ONTAP 7GNetApp
3.2 Data ONTAP (Software) Mgmt - 'Place e0M on a management VLAN'TNS NetApp Data ONTAP 7GNetApp
3.10 (L1) Host must not suppress warnings that the shell is enabledCIS VMware ESXi 8.0 v1.2.0 L1VMware

SYSTEM AND INFORMATION INTEGRITY

4.2.2 Restrict Access to SYSCAT.AUDITUSECIS IBM DB2 11 v1.1.0 Database Level 1IBM_DB2DB

ACCESS CONTROL, MEDIA PROTECTION

5.3 SnapVault - 'snapvault.access has been configured'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

5.3 SnapVault - 'snapvault.preservesnap = on'TNS NetApp Data ONTAP 7GNetApp

CONTINGENCY PLANNING

5.4 CIFS - 'cifs.audit.account_mgmt_events.enable = on'TNS NetApp Data ONTAP 7GNetApp

AUDIT AND ACCOUNTABILITY

5.4 CIFS - 'cifs.audit.autosave.onsize.enable = on'TNS NetApp Data ONTAP 7GNetApp

AUDIT AND ACCOUNTABILITY

5.4 CIFS - 'cifs.audit.file_access_events.enable = on'TNS NetApp Data ONTAP 7GNetApp

AUDIT AND ACCOUNTABILITY

5.4 CIFS - 'cifs.audit.nfs.enable = on'TNS NetApp Data ONTAP 7GNetApp

AUDIT AND ACCOUNTABILITY

5.4 CIFS - 'cifs.restrict_anonymous = 2'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

5.4 CIFS - 'cifs.smb2.durable_handle.enable = on'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

5.4 CIFS - 'dns.enable = on'TNS NetApp Data ONTAP 7GNetApp

SYSTEM AND COMMUNICATIONS PROTECTION

5.4 CIFS - 'timed.proto = ntp'TNS NetApp Data ONTAP 7GNetApp

AUDIT AND ACCOUNTABILITY

5.5 NFS - 'cifs.nfs_root_ignore_acl = on'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

5.5 NFS - 'nfs.rpcsec.ctx.high has been configured'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

5.5 NFS - 'nfs.rpcsec.ctx.idle has been configured'TNS NetApp Data ONTAP 7GNetApp

ACCESS CONTROL

5.5 NFS - 'nfs.v4.read_delegation = on'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

7.1.1.10 Ensure that Intune logs are captured and sent to Log AnalyticsCIS Microsoft Azure Foundations v4.0.0 L2microsoft_azure

AUDIT AND ACCOUNTABILITY

AIX7-00-002141 - The AIX /etc/hosts file must be group-owned by system.DISA STIG AIX 7.x v3r1Unix

CONFIGURATION MANAGEMENT

AIX7-00-002142 - The AIX /etc/hosts file must have a mode of 0640 or less permissive.DISA STIG AIX 7.x v3r1Unix

CONFIGURATION MANAGEMENT

F5BI-AS-000165 - To protect against data mining, The BIG-IP ASM module must be configured to detect SQL injection attacks launched against data storage objects, including, at a minimum, databases, database records, and database fields when providing content filtering to virtual servers.DISA F5 BIG-IP Application Security Manager STIG v2r2F5

ACCESS CONTROL

OL07-00-040180 - The Oracle Linux operating system must implement cryptography to protect the integrity of Lightweight Directory Access Protocol (LDAP) authentication communications - LDAP authentication communications.DISA Oracle Linux 7 STIG v3r2Unix

ACCESS CONTROL

PANW-IP-000041 - The Palo Alto Networks security platform must protect against or limit the effects of known and unknown types of denial-of-service (DoS) attacks by employing rate-based attack prevention behavior analysis (traffic thresholds) - traffic thresholdsDISA STIG Palo Alto IDPS v3r2Palo_Alto

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-07-010020 - The Red Hat Enterprise Linux operating system must be configured so that the cryptographic hash of system files and commands matches vendor values.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

CONFIGURATION MANAGEMENT