Item Search

NameAudit NamePluginCategory
1.4.3.3 Ensure 'aaa authentication secure-http-client' is configured correctlyCIS Cisco ASA 9.x Firewall L1 v1.1.0Cisco

ACCESS CONTROL, CONFIGURATION MANAGEMENT

1.4.3.3 Ensure 'aaa authentication secure-http-client' is configured correctlyCIS Cisco Firewall v8.x L1 v4.2.0Cisco

ACCESS CONTROL

1.61 CISC-RT-000680CIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT ICisco

CONFIGURATION MANAGEMENT

1.70 CISC-RT-000680CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT ICisco

CONFIGURATION MANAGEMENT

2.2 Ensure 'Protect RE' Firewall Filter includes explicit terms for all Management ServicesCIS Juniper OS Benchmark v2.1.0 L2Juniper

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

2.4 Do Not Specify Passwords in the Command LineCIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L1 MySQL RDBMS on Linux UnixUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.4 Do Not Specify Passwords in the Command LineCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS on Linux UnixUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.4 Ensure DHCP services are disabled for untrusted interfacesCIS Cisco ASA 9.x Firewall L1 v1.1.0Cisco

CONFIGURATION MANAGEMENT, CONTINGENCY PLANNING, PLANNING, PROGRAM MANAGEMENT, SYSTEM AND SERVICES ACQUISITION, SYSTEM AND COMMUNICATIONS PROTECTION

2.4 Ensure nonessential services are removed or maskedCIS Fedora 19 Family Linux Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.4 Ensure nonessential services are removed or maskedCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.4 Ensure nonessential services are removed or maskedCIS SUSE Linux Enterprise 12 v3.2.1 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.4 Ensure there are no 'other' writable objectsCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

2.4 Set 'Turn on ActiveX Filtering' to 'Enabled'CIS IE 9 v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

2.4.3 Ensure keepalive_timeout is 10 seconds or less, but not 0CIS NGINX v3.0.0 L1 LoadbalancerUnix

SYSTEM AND SERVICES ACQUISITION

2.4.3 Ensure keepalive_timeout is 10 seconds or less, but not 0CIS NGINX v3.0.0 L1 ProxyUnix

SYSTEM AND SERVICES ACQUISITION

2.4.3 Ensure keepalive_timeout is 10 seconds or less, but not 0CIS NGINX v3.0.0 L1 WebserverUnix

SYSTEM AND SERVICES ACQUISITION

4.1 Create CIS Audit ClassCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

4.2 Enable Auditing of Incoming Network Connections - AUE_ACCEPT : cisCIS Solaris 11.2 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_ACCEPT : cisCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_ACCEPT : cisCIS Solaris 11 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_CONNECT : cisCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_CONNECT : cisCIS Solaris 11.2 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_CONNECT : cisCIS Solaris 11 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_inetd_connect : cisCIS Solaris 11.2 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_inetd_connect : cisCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_inetd_connect : cisCIS Solaris 11 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_SOCKACCEPT : cisCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_SOCKACCEPT : cisCIS Solaris 11 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_SOCKCONNECT : cisCIS Solaris 11.2 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_SOCKCONNECT : cisCIS Solaris 11 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.2 Enable Auditing of Incoming Network Connections - AUE_SOCKCONNECT : cisCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.3 Enable Auditing of File Metadata Modification Events - AUE_ACLSET : cisCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.3 Enable Auditing of File Metadata Modification Events - AUE_ACLSET : cisCIS Solaris 11.2 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

4.3 Enable Auditing of File Metadata Modification Events - AUE_CHOWN : cisCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.3 Enable Auditing of File Metadata Modification Events - AUE_FACLSET : cisCIS Solaris 11 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

8.3.3 Use secure protocols for virtual serial port accessCIS VMware ESXi 5.1 v1.0.1 Level 1VMware
18.9.20.1.6 Ensure 'Turn off printing over HTTP' is set to 'Enabled'CIS Microsoft Windows Server 2019 v5.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.9.20.1.7 Ensure 'Turn off printing over HTTP' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.9.20.1.7 Ensure 'Turn off printing over HTTP' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2Windows

CONFIGURATION MANAGEMENT

IIST-SV-000205 - The IIS 10.0 web server must enable HTTP Strict Transport Security (HSTS)DISA IIS 10.0 Server v2r10Windows

CONFIGURATION MANAGEMENT

IIST-SV-000205 - The IIS 10.0 web server must enable HTTP Strict Transport Security (HSTS).DISA Microsoft IIS 10.0 Server STIG v3r7Windows

CONFIGURATION MANAGEMENT

IISW-SV-000125 - The IIS 8.5 web server must have Web Distributed Authoring and Versioning (WebDAV) disabled.DISA IIS 8.5 Server v2r7Windows

CONFIGURATION MANAGEMENT

VCLD-67-000021 - VAMI must not have the Web Distributed Authoring (WebDAV) servlet installed.DISA STIG VMware vSphere 6.7 VAMI-lighttpd v1r3Unix

CONFIGURATION MANAGEMENT

VCLD-70-000015 - VAMI must not have the Web Distributed Authoring (WebDAV) servlet installed.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

CONFIGURATION MANAGEMENT

VCLD-80-000034 - The vCenter VAMI service must have Web Distributed Authoring (WebDAV) disabled.DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3Unix

CONFIGURATION MANAGEMENT

VCLD-80-000034 The vCenter VAMI service must have Web Distributed Authoring (WebDAV) disabled.DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1Unix

CONFIGURATION MANAGEMENT

WA00545 A22 - Web server options for the OS root must be disabled.DISA STIG Apache Server 2.2 Unix v1r11Unix

CONFIGURATION MANAGEMENT

WA00545 A22 - Web server options for the OS root must be disabled.DISA STIG Apache Server 2.2 Unix v1r11 MiddlewareUnix

CONFIGURATION MANAGEMENT

WA00547 A22 - The ability to override the access configuration for the OS root directory must be disabled.DISA STIG Apache Server 2.2 Unix v1r11Unix

ACCESS CONTROL

WA00547 A22 - The ability to override the access configuration for the OS root directory must be disabled.DISA STIG Apache Server 2.2 Unix v1r11 MiddlewareUnix

CONFIGURATION MANAGEMENT