Item Search

NameAudit NamePluginCategory
1.1 Use the Latest Package UpdatesCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.4 Ensure 'application pool identity' is configured for all application poolsCIS IIS 7 L1 v1.8.0Windows

ACCESS CONTROL

1.6 Ensure 'application pool identity' is configured for anonymous user identityCIS IIS 7 L1 v1.8.0Windows

CONFIGURATION MANAGEMENT

2.1 Ensure 'global authorization rule' is set to restrict accessCIS IIS 7 L1 v1.8.0Windows

ACCESS CONTROL

2.2 Ensure Access to Sensitive Site Features Is Restricted To Authenticated Principals Only - DefaultCIS IIS 7 L1 v1.8.0Windows
2.6 Disable Kerberos TGT Expiration WarningCIS Solaris 11 L1 v1.1.0Unix
2.7 Ensure 'passwordFormat' is not set to clear - ApplicationsCIS IIS 7 L1 v1.8.0Windows

IDENTIFICATION AND AUTHENTICATION

2.12 Configure TCP Wrappers - hosts.denyCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.1 Restrict Core Dumps to Protected Directory - global core dump logging = enabledCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

3.1 Restrict Core Dumps to Protected Directory - global core file patternCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

3.1 Restrict Core Dumps to Protected Directory - per-process core dumps = disabledCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

3.4 Disable Source Packet Forwarding - persistent ipv4 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.4 Disable Source Packet Forwarding - persistent ipv6 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.5 Disable Directed Broadcast Packet Forwarding - persistent ip = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.8 Disable Response to ICMP Broadcast Netmask Requests - persistent ip = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.10 Disable Response to Multicast Echo Request - current ipv4 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.10 Disable Response to Multicast Echo Request - persistent ipv4 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.11 Ignore ICMP Redirect Messages - current ipv6 = 1CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.12 Set Strict Multihoming - persistent ipv4 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.15 Set Maximum Number of Half-open TCP Connections - persistent tcp = 4096CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.17 Disable Network Routing - ipv4-forwarding current = disabledCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.17 Disable Network Routing - ipv4-routing current = disabledCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.17 Disable Network Routing - ipv6-forwarding current = disabledCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.17 Disable Network Routing - ipv6-routing current = disabledCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.7 Ensure Unlisted File Extensions are not allowed - DefaultCIS IIS 7 L1 v1.8.0Windows

CONFIGURATION MANAGEMENT

4.10 Ensure 'notListedCgisAllowed' is set to falseCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

5.2 Set Sticky Bit on World Writable DirectoriesCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.1 Ensure FTP requests are encrypted - Data Channel SitesCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

6.3 Disable X11 Forwarding for SSH - X11Forwarding = noCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.12 Set Default Screen Lock for GNOME Users - lock = trueCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.12 Set Default Screen Lock for GNOME Users - timeout = 10CIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.13 Restrict at/cron to Authorized Users - /etc/cron.d/cron.allow permsCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.17 Secure the GRUB Menu (Intel) - password --md5CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

7.2 Set Strong Password Creation Policies - HISTORY = 10CIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.9 Ensure RC2 Cipher Suites is disabled - RC2 40/128CIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

7.10 Ensure RC4 Cipher Suites is disabled - RC4 40/128CIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

7.12 Ensure AES 128/128 Cipher Suite is configuredCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

8.1 Create Warnings for Standard Login Services - etc/issue permsCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

8.2 Enable a Warning Banner for the SSH Service - Banner = /etc/issueCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

8.4 Enable a Warning Banner for the FTP service - DisplayConnect /etc/issueCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

8.5 Check that the Banner Setting for telnet is Null - BANNER =CIS Solaris 11.2 L1 v1.1.0Unix

ACCESS CONTROL

9.4 Ensure Password Fields are Not EmptyCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

9.6 Ensure root PATH Integrity - writeable dir in pathCIS Solaris 11.2 L1 v1.1.0Unix

ACCESS CONTROL

9.9 Check Permissions on User .netrc FilesCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.9 Check Permissions on User .netrc FilesCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.12 Check That Users Are Assigned Home DirectoriesCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.14 Check User Home Directory OwnershipCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.15 Check for Duplicate UIDsCIS Solaris 11.2 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

9.17 Check That Reserved UIDs Are Assigned to System AccountsCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

10.2 SN.2 Remove Support for Internet Services (inetd)CIS Solaris 11.2 L2 v1.1.0Unix