Item Search

NameAudit NamePluginCategory
1.1.3 Hardening Password RulesCIS HPE Aruba Networking CX Switch v1.0.1 L1ArubaOS

IDENTIFICATION AND AUTHENTICATION

1.2 Enable AES-GCM Encryption of EOS SecretsCIS Arista EOS benchmark v1.0.0 L1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

1.2.5 Set 'access-class' for 'line vty'CIS Cisco IOS 12 L1 v4.0.0Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.3.2 Configuring Time ServicesCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security RecommendationsArubaOS

AUDIT AND ACCOUNTABILITY

1.3.2 Configuring Time ServicesCIS HPE Aruba Networking CX Switch v1.0.1 L1ArubaOS

AUDIT AND ACCOUNTABILITY

1.5 CISC-RT-000120CIS Cisco IOS Switch RTR STIG v1.1.0 CAT ICisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.6.4 Configure NTP AuthenticationCIS Cisco NX-OS v1.2.0 L2Cisco

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

1.12 Login BannerCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security RecommendationsArubaOS

ACCESS CONTROL

1.12 Login BannerCIS HPE Aruba Networking CX Switch v1.0.1 L1ArubaOS

ACCESS CONTROL

1.35 CISC-RT-000393CIS Cisco IOS XR Router RTR STIG v1.0.0 CAT IICisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.39 CISC-ND-001410CIS Cisco IOS XE Switch NDM STIG v1.1.0 CAT IICisco

CONFIGURATION MANAGEMENT, CONTINGENCY PLANNING

1.43 CISC-ND-001470CIS Cisco IOS Router NDM STIG v1.1.0 CAT ICisco

CONFIGURATION MANAGEMENT

1.67 CISC-RT-000880CIS Cisco NX OS Switch RTR STIG v1.1.0 CAT IICisco

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.1.1 Disable USB and Bluetooth on DeviceCIS HPE Aruba Networking CX Switch v1.0.1 L2ArubaOS

CONFIGURATION MANAGEMENT, MEDIA PROTECTION

2.1.1.1.2 Set the 'ip domain-name'CIS Cisco IOS XE 16.x v2.2.0 L1Cisco

CONFIGURATION MANAGEMENT

2.1.1.1.2 Set the 'ip domain-name'CIS Cisco IOS XE 17.x v2.2.1 L1Cisco

CONFIGURATION MANAGEMENT

2.1.2 Front Panel SecurityCIS HPE Aruba Networking CX Switch v1.0.1 L1ArubaOS

PHYSICAL AND ENVIRONMENTAL PROTECTION

2.4.1 Idle TimeoutCIS Arista EOS benchmark v1.0.0 L1Arista

CONFIGURATION MANAGEMENT

2.5.3 Authentication, Authorization, and AccountingCIS Arista EOS benchmark v1.0.0 L1Arista

AUDIT AND ACCOUNTABILITY

2.9 API access using httpsCIS Arista EOS benchmark v1.0.0 L2Arista

SYSTEM AND COMMUNICATIONS PROTECTION

3.3.1.3 PIM SSMCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security RecommendationsArubaOS

ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, MEDIA PROTECTION, SYSTEM AND COMMUNICATIONS PROTECTION

ARST-L2-000070 - The Arista MLS switch must have STP Loop Guard enabled on all nondesignated STP switch ports.DISA Arista MLS EOS 4.X L2S STIG v2r3Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-L2-000070 - The Arista MLS switch must have STP Loop Guard enabled on all nondesignated STP switch ports.DISA STIG Arista MLS EOS 4.2x L2S v2r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-L2-000130 - The Arista MLS layer 2 switch must have IGMP or MLD Snooping configured on all VLANs.DISA Arista MLS EOS 4.X L2S STIG v2r3Arista

CONFIGURATION MANAGEMENT

ARST-L2-000130 - The Arista MLS layer 2 switch must have IGMP or MLD Snooping configured on all VLANs.DISA STIG Arista MLS EOS 4.2x L2S v2r1Arista

CONFIGURATION MANAGEMENT

ARST-L2-000170 - The Arista MLS layer 2 switch must have all disabled switch ports assigned to an unused VLAN.DISA STIG Arista MLS EOS 4.2x L2S v2r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-L2-000200 - The Arista MLS layer 2 switch must not use the default VLAN for management traffic.DISA STIG Arista MLS EOS 4.2x L2S v2r1Arista

CONTINGENCY PLANNING

ARST-L2-000200 - The Arista MLS layer 2 switch must not use the default VLAN for management traffic.DISA Arista MLS EOS 4.X L2S STIG v2r3Arista

CONTINGENCY PLANNING

ARST-L2-000230 - The Arista MLS layer 2 switch must not have any switch ports assigned to the native VLAN.DISA STIG Arista MLS EOS 4.2x L2S v2r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-L2-000230 - The Arista MLS layer 2 switch must not have any switch ports assigned to the native VLAN.DISA Arista MLS EOS 4.X L2S STIG v2r3Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-ND-000110 - The Arista network device must enforce approved authorizations for controlling the flow of management information within the network device based on information flow control policies.DISA Arista MLS EOS 4.X NDM STIG v2r2Arista

ACCESS CONTROL

ARST-ND-000110 - The Arista network device must enforce approved authorizations for controlling the flow of management information within the network device based on information flow control policies.DISA STIG Arista MLS EOS 4.2x NDM v2r1Arista

ACCESS CONTROL

ARST-ND-000660 - The Arista network device must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).DISA STIG Arista MLS EOS 4.2x NDM v2r1Arista

IDENTIFICATION AND AUTHENTICATION

ARST-ND-000660 - The Arista network device must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).DISA Arista MLS EOS 4.X NDM STIG v2r2Arista

IDENTIFICATION AND AUTHENTICATION

ARST-ND-000820 - The network device must be configured to conduct backups of system level information contained in the information system when changes occur.DISA Arista MLS EOS 4.X NDM STIG v2r2Arista

CONTINGENCY PLANNING

ARST-ND-000820 - The network device must be configured to conduct backups of system level information contained in the information system when changes occur.DISA STIG Arista MLS EOS 4.2x NDM v2r1Arista

CONTINGENCY PLANNING

ARST-RT-000170 - The Arista perimeter router must be configured to not be a Border Gateway Protocol (BGP) peer to an alternate gateway service provider.DISA Arista MLS EOS 4.X Router STIG v2r2Arista

ACCESS CONTROL

ARST-RT-000170 - The Arista perimeter router must be configured to not be a Border Gateway Protocol (BGP) peer to an alternate gateway service provider.DISA STIG Arista MLS EOS 4.2x Router v2r1Arista

ACCESS CONTROL

ARST-RT-000830 - The perimeter router must be configured to block all packets with any IP options.DISA Arista MLS EOS 4.X Router STIG v2r2Arista

SYSTEM AND COMMUNICATIONS PROTECTION

Brocade - Bottleneck detection must be enabledTenable Best Practices Brocade FabricOSBrocade

CONFIGURATION MANAGEMENT

Brocade - Device Connection Control policy must be rejectedTenable Best Practices Brocade FabricOSBrocade

SYSTEM AND COMMUNICATIONS PROTECTION

Brocade - Enable the track changes featureTenable Best Practices Brocade FabricOSBrocade

AUDIT AND ACCOUNTABILITY

Brocade - Fabric Configuration Server policy must be rejectedTenable Best Practices Brocade FabricOSBrocade

SYSTEM AND COMMUNICATIONS PROTECTION

Brocade - Fabric Element Authentication must be rejectedTenable Best Practices Brocade FabricOSBrocade

SYSTEM AND COMMUNICATIONS PROTECTION

Brocade - Switch Connection Control policy must be rejectedTenable Best Practices Brocade FabricOSBrocade

SYSTEM AND COMMUNICATIONS PROTECTION

DISA_VMware_vSphere_8.0_vCenter_Appliance_User_Interface_(UI)_STIG_v2r1.audit from DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix
ESXI5-VMNET-000008 - All physical switch ports must be configured with spanning tree disabled.DISA VMWare ESXi 5.0 Server STIG v2r1VMware

CONFIGURATION MANAGEMENT

ESXI5-VMNET-000017 - The non-negotiate option must be configured for trunk links between external physical switches and virtual switches in VST mode.DISA VMWare ESXi 5.0 Server STIG v2r1VMware

CONFIGURATION MANAGEMENT

Out-of-Band Management portArubaOS Switch 16.x Hardening Guide v1.0.0ArubaOS

SYSTEM AND COMMUNICATIONS PROTECTION

Time synchronization - ntp unicastArubaOS Switch 16.x Hardening Guide v1.0.0ArubaOS

AUDIT AND ACCOUNTABILITY