Item Search

NameAudit NamePluginCategory
2.0 Install & Config - 'Disable TFTP'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

2.0 Install & Config - 'Disable WebDav'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

5.5 NFS - 'nfs.v4.enable = off'TNS NetApp Data ONTAP 7GNetApp

CONFIGURATION MANAGEMENT

6.1 Ensure that MongoDB uses a non-default portCIS MongoDB 4 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT

6.1 Ensure that MongoDB uses a non-default portCIS MongoDB 5 v1.2.0 L1 UnixUnix

CONFIGURATION MANAGEMENT

18.5.10 Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'CIS Microsoft Windows Server 2022 v5.1.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.5.10 Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'CIS Microsoft Windows Server 2025 v2.1.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.6.11.3 Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'CIS Microsoft Windows Server 2025 v2.1.0 L1 DCWindows

CONFIGURATION MANAGEMENT

18.8.1.1 Ensure 'Turn off notifications network usage' is set to 'Enabled'CIS Microsoft Windows Server 2022 v5.1.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.9.20.1.2 Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'CIS Microsoft Windows Server 2025 v2.1.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.9.33.2 Ensure 'Allow upload of User Activities' is set to 'Disabled'CIS Microsoft Windows Server 2022 v5.1.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.9.33.2 Ensure 'Allow upload of User Activities' is set to 'Disabled'CIS Microsoft Windows Server 2025 v2.1.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.9.35.6.1 Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.9.35.6.2 Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'CIS Microsoft Windows Server 2022 v5.1.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.9.38.1 Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)CIS Microsoft Windows Server 2022 v5.1.0 L1 MSWindows

CONFIGURATION MANAGEMENT

18.9.38.2 Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

CONFIGURATION MANAGEMENT

18.9.38.2 Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)CIS Microsoft Windows Server 2022 v5.1.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.16.3 Ensure 'Do not show feedback notifications' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

CONFIGURATION MANAGEMENT

18.10.16.3 Ensure 'Do not show feedback notifications' is set to 'Enabled'CIS Microsoft Windows Server 2022 v5.1.0 L1 MSWindows

CONFIGURATION MANAGEMENT

18.10.63.1 Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'CIS Microsoft Windows Server 2022 v5.1.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.10.63.1 Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'CIS Microsoft Windows Server 2025 v2.1.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.66.3 Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.10.81.1 Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.81.1 Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'CIS Microsoft Windows Server 2022 v5.1.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.10.81.2 Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

CONFIGURATION MANAGEMENT

18.10.81.2 Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.10.81.2 Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'CIS Microsoft Windows Server 2025 v2.1.0 L1 MSWindows

CONFIGURATION MANAGEMENT

18.10.81.2 Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'CIS Microsoft Windows Server 2022 v5.1.0 L1 MSWindows

CONFIGURATION MANAGEMENT

69.4 Ensure 'Let Apps Activate With Voice Above Lock' is set to 'Enabled: Force Deny'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

Adtran : Disable FTPTNS Adtran AOS Best Practice AuditAdtran

CONFIGURATION MANAGEMENT

Enable only necessary and secure services, protocols, daemons - 'snapwatchd'TNS Citrix HypervisorUnix

CONFIGURATION MANAGEMENT

Enable only necessary and secure services, protocols, daemons - 'sshd'TNS Citrix HypervisorUnix

CONFIGURATION MANAGEMENT

Ensure CUPS Server is not enabledTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure daytime services are not enabledTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure DNS Server is not enabledTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure mounting of hfs filesystems is disabled - lsmodTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure mounting of hfs filesystems is disabled - modprobeTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure mounting of hfsplus filesystems is disabled - modprobeTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure mounting of squashfs filesystems is disabled - modprobeTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure mounting of udf filesystems is disabled - modprobeTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure NIS Server is not enabledTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure outbound and established connections are configuredTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure rsync service is not enabledTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure SCTP is disabledTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure tftp server is not enabledTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure time services are not enabledTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Extreme : Disable TelnetTNS Extreme ExtremeXOS Best Practice AuditExtreme_ExtremeXOS

CONFIGURATION MANAGEMENT

HP ProCurve - 'Disable HTTP'TNS HP ProCurveHPProCurve

CONFIGURATION MANAGEMENT

HP ProCurve - 'Disable TFTP client'TNS HP ProCurveHPProCurve

CONFIGURATION MANAGEMENT

Huawei: Disable FTP IPV6TNS Huawei VRP Best Practice AuditHuawei

CONFIGURATION MANAGEMENT