Item Search

NameAudit NamePluginCategory
1.5.3 Set Boot Loader PasswordCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

1.7.2 Ensure 'TLS 1.0' is set for HTTPS accessCIS Cisco Firewall ASA 9 L1 v4.1.0Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.7.3 Ensure 'SSL AES 256 encryption' is set for HTTPS accessCIS Cisco Firewall v8.x L1 v4.2.0Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.7.3 Ensure 'SSL AES 256 encryption' is set for HTTPS accessCIS Cisco Firewall ASA 9 L1 v4.1.0Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.10.6 Ensure 'logging history severity level' is set to greater than or equal to '5'CIS Cisco Firewall v8.x L1 v4.2.0Cisco

AUDIT AND ACCOUNTABILITY

1.19 CISC-ND-000720CIS Cisco NX OS Switch NDM STIG v1.1.0 CAT ICisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.41 CISC-RT-000480CIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT IICisco

ACCESS CONTROL, CONFIGURATION MANAGEMENT

1.50 CISC-RT-000480CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT IICisco

ACCESS CONTROL

1.52 MADB-10-006200CIS MariaDB Enterprise 10.x STIG v1.1.0 CAT II MySQLDBMySQLDB

ACCESS CONTROL

3.1.3 - AirWatch - Set the 'minimum password length'AirWatch - CIS Apple iOS 8 v1.0.0 L1MDM

IDENTIFICATION AND AUTHENTICATION

5.3.3 Ensure password reuse is limitedCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

6.12 Ensure all HTTP Header Logging options are enabled - Log Container PageCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0Palo_Alto

AUDIT AND ACCOUNTABILITY

6.12 Ensure all HTTP Header Logging options are enabled - RefererCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0Palo_Alto

AUDIT AND ACCOUNTABILITY

7.12 Ensure WebAuthn is Used for Phishing-Resistant Authentication Where RequiredCIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L2 MySQL RDBMS MySQLDBMySQLDB

IDENTIFICATION AND AUTHENTICATION

AIOS-12-011200 - Apple iOS must implement the management setting: Disable Allow MailDrop.AirWatch - DISA Apple iOS 12 v2r1MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AIOS-13-011200 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.AirWatch - DISA Apple iOS/iPadOS 13 v2r1MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AIOS-13-011200 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.MobileIron - DISA Apple iOS/iPadOS 13 v2r1MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AIOS-14-009400 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.MobileIron - DISA Apple iOS/iPadOS 14 v1r3MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AIOS-15-011000 - Apple iOS/iPadOS 15 must implement the management setting: Disable Allow MailDrop.AirWatch - DISA Apple iOS/iPadOS 15 STIG v1r4MDM

CONFIGURATION MANAGEMENT

AIOS-16-011000 - Apple iOS/iPadOS 16 must implement the management setting: Disable Allow MailDrop.MobileIron - DISA Apple iOS-iPadOS 16 STIG v2r2MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AIOS-18-011000 - Apple iOS/iPadOS 18 must implement the management setting: disable Allow MailDrop.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AIX7-00-002129 - If Bourne / ksh shell is used, AIX must display logout messages.DISA IBM AIX 7.x STIG v3r3Unix

ACCESS CONTROL

BIND-9X-001360 - The BIND 9.x server implementation must prohibit the forwarding of queries to servers controlled by organizations outside of the U.S. government.DISA BIND 9.x STIG v3r3Unix

CONFIGURATION MANAGEMENT

CISC-RT-000280 - The Cisco perimeter router must be configured to protect an enclave connected to an alternate gateway by using an inbound filter that only permits packets with destination addresses within the sites address space.DISA Cisco IOS XR Router RTR STIG v3r3Cisco

ACCESS CONTROL

CISC-RT-000320 - The Cisco perimeter switch must be configured to filter traffic destined to the enclave in accordance with the guidelines contained in DoD Instruction 8551.1.DISA Cisco IOS Switch RTR STIG v3r3Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000470 - The Cisco BGP router must be configured to enable the Generalized TTL Security Mechanism (GTSM).DISA Cisco IOS XE Router RTR STIG v3r5Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000470 - The Cisco BGP switch must be configured to enable the Generalized TTL Security Mechanism (GTSM).DISA Cisco IOS XE Switch RTR STIG v3r4Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000480 - The Cisco BGP switch must be configured to use a unique key for each autonomous system (AS) that it peers with.DISA Cisco IOS XE Switch RTR STIG v3r4Cisco

ACCESS CONTROL, CONFIGURATION MANAGEMENT

DISA_STIG_JBoss_EAP_6.3_v2r6.audit from DISA JBoss Enterprise Application Platform 6.3 v2r6 STIGDISA JBoss Enterprise Application Platform 6.3 STIG v2r6Unix
ESXi: esxi-8.account-lockoutVMware vSphere Security Configuration and Hardening GuideVMware

ACCESS CONTROL

GOOG-17-008100 - Google Android 17 must be configured to disable ad hoc wireless client-to-client connection capability.AirWatch - DISA Google Android 17 COPE STIG v1r1MDM

SYSTEM AND COMMUNICATIONS PROTECTION

MADB-10-006200 - MariaDB must automatically terminate a user's session after organization-defined conditions or trigger events requiring session disconnect.DISA MariaDB Enterprise 10.x STIG v2r5 MySQLDBMySQLDB

ACCESS CONTROL

OL6-00-000202 - The audit system must be configured to audit the loading and unloading of dynamic kernel modules - insmodDISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000202 - The audit system must be configured to audit the loading and unloading of dynamic kernel modules - modprobeDISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000202 - The audit system must be configured to audit the loading and unloading of dynamic kernel modules - module b64DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000001 - The Photon operating system must audit all account creations - groupaddDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL

PHTN-67-000044 - The Photon operating system must audit all account modifications - groupmodDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000047 - The Photon operating system must audit all account removal actions - groupdelDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL

RHEL-06-000202 - The audit system must be configured to audit the loading and unloading of dynamic kernel modules - delete_module 32 bitDISA Red Hat Enterprise Linux 6 STIG v2r2Unix

AUDIT AND ACCOUNTABILITY

RHEL-06-000202 - The audit system must be configured to audit the loading and unloading of dynamic kernel modules - init_module 32 bitDISA Red Hat Enterprise Linux 6 STIG v2r2Unix

AUDIT AND ACCOUNTABILITY

RHEV: ClustersTenable RedHat Enterprise VirtualizationRHEV
RHEV: DatacentersTenable RedHat Enterprise VirtualizationRHEV
RHEV: DomainsTenable RedHat Enterprise VirtualizationRHEV
RHEV: GroupsTenable RedHat Enterprise VirtualizationRHEV
RHEV: Product InfoTenable RedHat Enterprise VirtualizationRHEV
RHEV: Review Events with severity >= ErrorTenable RedHat Enterprise VirtualizationRHEV
RHEV: Running VMsTenable RedHat Enterprise VirtualizationRHEV
RHEV: UsersTenable RedHat Enterprise VirtualizationRHEV
SLES-12-010910 - The SUSE operating system must be configured to not overwrite Pluggable Authentication Modules (PAM) configuration on package changes.DISA SLES 12 STIG v3r5Unix

CONFIGURATION MANAGEMENT

SLES-15-040220 - The SUSE operating system must be configured to not overwrite Pluggable Authentication Modules (PAM) configuration on package changes.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT