Item Search

NameAudit NamePluginCategory
1.13 CISC-RT-000220CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT IICisco

AUDIT AND ACCOUNTABILITY

1.29 CISC-RT-000380CIS Cisco IOS Switch RTR STIG v1.1.0 CAT IICisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.38 CISC-ND-001270CIS Cisco IOS Router NDM STIG v1.1.0 CAT IICisco

AUDIT AND ACCOUNTABILITY

1.49 CISC-RT-000540CIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT IIICisco

ACCESS CONTROL

1.51 CISC-RT-000500CIS Cisco IOS XR Router RTR STIG v1.0.0 CAT IICisco

ACCESS CONTROL

1.54 CISC-RT-000530CIS Cisco IOS XR Router RTR STIG v1.0.0 CAT IICisco

SYSTEM AND COMMUNICATIONS PROTECTION

1.61 CISC-RT-000810CIS Cisco NX OS Switch RTR STIG v1.1.0 CAT IIICisco

ACCESS CONTROL, MEDIA PROTECTION

1.66 CISC-RT-000640CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT ICisco

CONTINGENCY PLANNING

3.1.1 Ensure Caller ID is setCIS Juniper OS Benchmark v2.1.0 L1Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

3.3.1.2 Ensure net.ipv4.conf.all.forwarding is configuredCIS Amazon Linux 2 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.2 Ensure net.ipv4.conf.all.forwarding is configuredCIS Debian Linux 12 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.2 Ensure net.ipv4.conf.all.forwarding is configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.2 Ensure net.ipv4.conf.all.forwarding is configuredCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.3 Ensure net.ipv4.conf.default.forwarding is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.3 Ensure net.ipv4.conf.default.forwarding is configuredCIS Debian Linux 12 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.3 Ensure net.ipv4.conf.default.forwarding is configuredCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.3 Ensure net.ipv4.conf.default.forwarding is configuredCIS Amazon Linux 2 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Oracle Linux 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS AlmaLinux OS 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS AlmaLinux OS 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Oracle Linux 8 v4.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Red Hat Enterprise Linux 10 v1.0.1 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Red Hat Enterprise Linux 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Red Hat Enterprise Linux 8 v4.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Rocky Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Rocky Linux 8 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS AlmaLinux OS 8 v4.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

4.3.2.5 Ensure gated is not in useCIS IBM AIX 7 v1.2.0 L1Unix

CONFIGURATION MANAGEMENT

AMLS-L3-000300 - The Arista Multilayer Switch must only allow incoming communications from authorized sources to be routed to authorized destinations.DISA STIG Arista MLS DCS-7000 Series RTR v1r4Arista

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000540 - The Cisco BGP switch must be configured to reject route advertisements from BGP peers that do not list their autonomous system (AS) number as the first AS in the AS_PATH attribute.DISA Cisco IOS XE Switch RTR STIG v3r4Cisco

ACCESS CONTROL

Physical Security - Auxiliary Port - Disable the Auxiliary portJuniper Hardening JunOS 12 Devices ChecklistJuniper

CONFIGURATION MANAGEMENT

Physical Security - Console Port - Configure the insecure featureJuniper Hardening JunOS 12 Devices ChecklistJuniper

ACCESS CONTROL

Physical Security - Craft Interface/LCD Menu - Disable unnecessary functions for your environment - config-button no-clearJuniper Hardening JunOS 12 Devices ChecklistJuniper

CONFIGURATION MANAGEMENT

Physical Security - Craft Interface/LCD Menu - Disable unnecessary functions for your environment - craft-lockoutJuniper Hardening JunOS 12 Devices ChecklistJuniper

CONFIGURATION MANAGEMENT

Routing Protocol Security - BGP communication should source from a loopback interfaceJuniper Hardening JunOS 12 Devices ChecklistJuniper

CONFIGURATION MANAGEMENT

Routing Protocol Security - Use strong authentication keys that meet your organization's password complexity policyJuniper Hardening JunOS 12 Devices ChecklistJuniper

IDENTIFICATION AND AUTHENTICATION

SQL4-00-038000 - SQL Server must generate Trace or Audit records when concurrent logons/connections by the same user from different workstations occur - Event ID 14DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-038000 - SQL Server must generate Trace or Audit records when concurrent logons/connections by the same user from different workstations occur - Event ID 16DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

User Authentication Security - Centralized authentication - Configure accounting to trace activity and usageJuniper Hardening JunOS 12 Devices ChecklistJuniper

IDENTIFICATION AND AUTHENTICATION

User Authentication Security - Centralized authentication - Configure multiple servers for resiliency - RadiusJuniper Hardening JunOS 12 Devices ChecklistJuniper

IDENTIFICATION AND AUTHENTICATION

User Authentication Security - Centralized authentication - Create an emergency local account in the event authentication is unavailableJuniper Hardening JunOS 12 Devices ChecklistJuniper

ACCESS CONTROL

User Authentication Security - Configure a password complexity policy - all character-sets are enforcedJuniper Hardening JunOS 12 Devices ChecklistJuniper

IDENTIFICATION AND AUTHENTICATION

User Authentication Security - Configure a password complexity policy - Lower case charactersJuniper Hardening JunOS 12 Devices ChecklistJuniper

IDENTIFICATION AND AUTHENTICATION

User Authentication Security - Configure a password complexity policy - Minimum password lengthJuniper Hardening JunOS 12 Devices ChecklistJuniper

IDENTIFICATION AND AUTHENTICATION

User Authentication Security - Configure login security options to hinder password guessing attacks - tries-before-disconnectJuniper Hardening JunOS 12 Devices ChecklistJuniper

ACCESS CONTROL

User Authentication Security - Local Authentication - Know the origin and purpose for all configured local accountsJuniper Hardening JunOS 12 Devices ChecklistJuniper

ACCESS CONTROL

User Authentication Security - Local Authentication - Set the authentication-order to meet your login security policyJuniper Hardening JunOS 12 Devices ChecklistJuniper

IDENTIFICATION AND AUTHENTICATION