Item Search

NameAudit NamePluginCategory
F5BI-DM-300013 - The F5 BIG-IP appliance must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for at least 15 minutes.DISA F5 BIG-IP TMOS NDM STIG v1r2F5

ACCESS CONTROL

F5BI-DM-300014 - The F5 BIG-IP appliance must be configured to display the Standard Mandatory DOD Notice and Consent Banner upon access to the TMOS User Interface.DISA F5 BIG-IP TMOS NDM STIG v1r2F5

ACCESS CONTROL

F5BI-DM-300037 - The F5 BIG-IP appliance must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).DISA F5 BIG-IP TMOS NDM STIG v1r2F5

AUDIT AND ACCOUNTABILITY

F5BI-FW-300015 - The F5 BIG-IP appliance must be configured to restrict itself from accepting outbound packets that contain an illegitimate address in the source address field via an egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).DISA F5 BIG-IP TMOS Firewall STIG v1r1F5

CONFIGURATION MANAGEMENT

FGFW-ND-000035 - The FortiGate device must allow full access to only those individuals or roles designated by the ISSM.DISA Fortigate Firewall NDM STIG v1r4FortiGate

ACCESS CONTROL

FGFW-ND-000070 - The FortiGate device must generate audit records when successful/unsuccessful attempts to delete administrator privileges occurDISA Fortigate Firewall NDM STIG v1r4FortiGate

AUDIT AND ACCOUNTABILITY

FGFW-ND-000085 - The FortiGate device must generate audit records showing starting and ending time for administrator access to the systemDISA Fortigate Firewall NDM STIG v1r4FortiGate

AUDIT AND ACCOUNTABILITY

FGFW-ND-000105 - The FortiGate device must allocate audit record storage capacity in accordance with organization-defined audit record storage requirementsDISA Fortigate Firewall NDM STIG v1r4FortiGate

AUDIT AND ACCOUNTABILITY

FGFW-ND-000130 - The FortiGate device must protect audit information from unauthorized deletion.DISA Fortigate Firewall NDM STIG v1r4FortiGate

AUDIT AND ACCOUNTABILITY

FGFW-ND-000270 - The FortiGate device must terminate idle sessions after 10 minutes of inactivity.DISA Fortigate Firewall NDM STIG v1r4FortiGate

MAINTENANCE

GOOG-11-000300 - Google Android 11 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.AirWatch - DISA Google Android 11 COBO v2r1MDM

ACCESS CONTROL

GOOG-11-000400 - Google Android 11 must be configured to lock the display after 15 minutes (or less) of inactivity.AirWatch - DISA Google Android 11 COPE v2r1MDM

ACCESS CONTROL

GOOG-11-002800 - Google Android 11 must be configured to disable developer modes.MobileIron - DISA Google Android 11 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-003500 - Google Android 11 must be configured to disable USB mass storage mode.AirWatch - DISA Google Android 11 COBO v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-008700 - Google Android 11 users must complete required training.MobileIron - DISA Google Android 11 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-009000 - Google Android 11 must have the DoD root and intermediate PKI certificates installed.AirWatch - DISA Google Android 11 COBO v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-009000 - Google Android 11 must have the DoD root and intermediate PKI certificates installed.MobileIron - DISA Google Android 11 COBO v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-009400 - Google Android 11 work profile must be configured to enforce the system application disable list.MobileIron - DISA Google Android 11 COBO v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-009600 - Google Android 11 must be provisioned as a fully managed device and configured to create a work profile.AirWatch - DISA Google Android 11 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-009600 - Google Android 11 must be provisioned as a fully managed device and configured to create a work profile.MobileIron - DISA Google Android 11 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-009800 - Google Android 11 work profile must be configured to disable automatic completion of workspace internet browser text input.AirWatch - DISA Google Android 11 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-010200 - Google Android 11 must be configured to disallow configuration of date and time.MobileIron - DISA Google Android 11 COBO v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-12-006100 - Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters - CharactersAirWatch - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-006100 - Google Android 12 must be configured to not allow passwords that include more than two repeating or sequential characters - CharactersAirWatch - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-006200 - Google Android 12 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.AirWatch - DISA Google Android 12 COPE v1r2MDM

ACCESS CONTROL

GOOG-12-006400 - Google Android 12 must be configured to not allow more than 10 consecutive failed authentication attempts.AirWatch - DISA Google Android 12 COPE v1r2MDM

ACCESS CONTROL

GOOG-12-007400 - Google Android 12 must be configured to disable developer modes.AirWatch - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-008600 - Google Android 12 must be configured to not allow backup of [all applications, configuration data] to remote systems.MobileIron - DISA Google Android 12 COBO v1r2MDM

SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-12-009800 - Google Android 12 users must complete required training.AirWatch - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-009800 - Google Android 12 users must complete required training.AirWatch - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-009900 - Google Android 12 must be configured to enforce that Wi-Fi Sharing is disabled.AirWatch - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010100 - The Google Android 12 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.AirWatch - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010200 - Google Android 12 work profile must be configured to enforce the system application disable list.AirWatch - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010400 - Google Android 12 work profile must be configured to disable automatic completion of work space Internet browser text input.AirWatch - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010400 - Google Android 12 work profile must be configured to disable automatic completion of work space Internet browser text input.AirWatch - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-12-010600 - Google Android 12 must be configured to disallow configuration of date and time.AirWatch - DISA Google Android 12 COPE v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-13-006100 - Google Android 13 must be configured to not allow passwords that include more than four repeating or sequential characters - AlphanumericMobileIron - DISA Google Android 13 COBO STIG v2r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-006500 - Google Android 13 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, MDM server, mobile application store].MobileIron - DISA Google Android 13 COBO STIG v2r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-006700 - Google Android 13 allowlist must be configured to not include applications with the following characteristics:AirWatch - DISA Google Android 13 COBO STIG v2r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-006700 - Google Android 13 allowlist must be configured to not include applications with the following characteristics:MobileIron - DISA Google Android 13 COBO STIG v2r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-007800 - Google Android 13 must be configured to generate audit records for the following auditable events: Detected integrity violations.AirWatch - DISA Google Android 13 COBO STIG v2r3MDM

AUDIT AND ACCOUNTABILITY

GOOG-13-009500 - Google Android 13 must be configured to disable ad hoc wireless client-to-client connection capability.AirWatch - DISA Google Android 13 COBO STIG v2r3MDM

SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-13-009900 - Google Android 13 must be configured to enforce that Wi-Fi Sharing is disabled.AirWatch - DISA Google Android 13 COBO STIG v2r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-010200 - The Google Android 13 work profile must be configured to enforce the system application disable list.AirWatch - DISA Google Android 13 COBO STIG v2r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-706700 - Google Android 13 allowlist must be configured to not include applications with the following characteristics (work profile only):MobileIron - DISA Google Android 13 BYOAD v1r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-709800 - Google Android 13 users must complete required training.AirWatch - DISA Google Android 13 BYOAD v1r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-710000 - Google Android 13 must have the DOD root and intermediate PKI certificates installed (work profile only).MobileIron - DISA Google Android 13 BYOAD v1r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-710100 - The Google Android 13 work profile must be configured to prevent users from adding personal email accounts to the work email app.AirWatch - DISA Google Android 13 BYOAD v1r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-710100 - The Google Android 13 work profile must be configured to prevent users from adding personal email accounts to the work email app.MobileIron - DISA Google Android 13 BYOAD v1r3MDM

CONFIGURATION MANAGEMENT

GOOG-13-710200 - The Google Android 13 work profile must be configured to enforce the system application disable list (work profile only).AirWatch - DISA Google Android 13 BYOAD v1r3MDM

CONFIGURATION MANAGEMENT