Item Search

NameAudit NamePluginCategory
DG0145-ORACLE11 - Audit records should contain required information.DISA STIG Oracle 11 Instance v9r1 DatabaseOracleDB

AUDIT AND ACCOUNTABILITY

GEN000000-AIX0200 - The system must not allow directed broadcasts to gateway.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN000240 - The system clock must be synchronized to an authoritative DoD time source - 'NTP daemon is running'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN000740 - All non-interactive/automated processing account passwords must be changed at least once per year or be locked.DISA STIG AIX 5.3 v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001000 - Remote consoles must be disabled or protected from unauthorized access.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN008000 - Certificates used to authenticate to the LDAP server must be provided from DoD-approved external PKI - 'ldapsslkeyf exists'DISA STIG AIX 5.3 v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN008000 - Certificates used to authenticate to the LDAP server must be provided from DoD-approved external PKI - 'Not Applicable'DISA STIG AIX 5.3 v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN008000 - Certificates used to authenticate to the LDAP server must be provided from DoD-approved external PKI - 'useSSL = yes'DISA STIG AIX 5.3 v1r2Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-40-000030 The Photon operating system must allow only authorized users to configure the auditd service.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

AUDIT AND ACCOUNTABILITY

PHTN-40-000059 The Photon operating system must use mechanisms meeting the requirements of applicable federal laws, Executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-40-000195 The Photon operating system must include root when automatically locking an account until the locked account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

ACCESS CONTROL

PHTN-40-000196 The Photon operating system must persist lockouts between system reboots.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

ACCESS CONTROL

PHTN-40-000206 The Photon operating system must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

CONFIGURATION MANAGEMENT

PHTN-40-000214 The Photon operating system must configure Secure Shell (SSH) to disallow Kerberos authentication.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

CONFIGURATION MANAGEMENT

PHTN-40-000218 The Photon operating system must configure Secure Shell (SSH) to ignore user-specific known_host files.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

CONFIGURATION MANAGEMENT

PHTN-40-000219 The Photon operating system must configure Secure Shell (SSH) to limit the number of allowed login attempts per connection.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

CONFIGURATION MANAGEMENT

PHTN-40-000222 The Photon operating system must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled on the command line.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

CONFIGURATION MANAGEMENT

PHTN-40-000234 The Photon operating system must be configured to protect the Secure Shell (SSH) private host key from unauthorized access.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

CONFIGURATION MANAGEMENT

SYMP-AG-000450 - Symantec ProxySG providing forward proxy encryption intermediary services must use NIST FIPS-validated cryptography to implement encryption services. - DestinationDISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

SYSTEM AND COMMUNICATIONS PROTECTION

SYMP-AG-000450 - Symantec ProxySG providing forward proxy encryption intermediary services must use NIST FIPS-validated cryptography to implement encryption services. - SourceDISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

SYSTEM AND COMMUNICATIONS PROTECTION

SYMP-AG-000460 - Symantec ProxySG providing reverse proxy encryption intermediary services must implement NIST FIPS-validated cryptography to generate cryptographic hashes.DISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

SYSTEM AND COMMUNICATIONS PROTECTION

SYMP-AG-000470 - Symantec ProxySG providing reverse proxy encryption intermediary services must implement NIST FIPS-validated cryptography for digital signatures.DISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

SYSTEM AND COMMUNICATIONS PROTECTION

SYMP-AG-000520 - Symantec ProxySG providing content filtering must protect against known and unknown types of denial-of-service (DoS) attacks by employing rate-based attack prevention behavior analysis.DISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

SYSTEM AND COMMUNICATIONS PROTECTION

SYMP-AG-000530 - Symantec ProxySG must implement load balancing to limit the effects of known and unknown types of denial-of-service (DoS) attacks.DISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

SYSTEM AND COMMUNICATIONS PROTECTION

VCLD-80-000001 The vCenter VAMI service must limit the number of allowed simultaneous session requests.DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1Unix

ACCESS CONTROL

VCLD-80-000031 The vCenter VAMI service must explicitly disable Multipurpose Internet Mail Extensions (MIME) mime mappings based on "Content-Type".DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCLD-80-000035 The vCenter VAMI service must protect system resources and privileged operations from hosted applications.DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCLD-80-000062 The vCenter VAMI service must disable directory listing.DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCLD-80-000063 The vCenter VAMI service must not be configured to use the "mod_status" module.DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCLD-80-000098 The vCenter VAMI service must be configured to hide the server type and version in client responses.DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCPF-80-000036 The vCenter Perfcharts service must disable stack tracing.DISA VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCPF-80-000065 The vCenter Perfcharts service must set URIEncoding to UTF-8.DISA VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v2r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCPF-80-000129 The vCenter Perfcharts service cookies must have 'http-only' flag set.DISA VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v2r1Unix

ACCESS CONTROL

VCPF-80-000137 The vCenter Perfcharts service directory listings parameter must be disabled.DISA VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCPF-80-000152 The vCenter Perfcharts service must enable 'ENFORCE_ENCODING_IN_GET_WRITER'.DISA VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCST-80-000065 The vCenter STS service must set URIEncoding to UTF-8.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCST-80-000127 The vCenter STS service must configure the 'setCharacterEncodingFilter' filter.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCST-80-000129 The vCenter STS service cookies must have 'http-only' flag set.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

ACCESS CONTROL

VCST-80-000130 The vCenter STS service DefaultServlet must be set to 'readonly' for 'PUT' and 'DELETE' commands.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

ACCESS CONTROL

VCST-80-000137 The vCenter STS service directory listings parameter must be disabled.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCST-80-000139 The vCenter STS service must have Autodeploy disabled.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCST-80-000140 The vCenter STS service xpoweredBy attribute must be disabled.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCST-80-000152 The vCenter STS service must enable 'ENFORCE_ENCODING_IN_GET_WRITER'.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCUI-80-000062 The vCenter UI service must be configured to fail to a known safe state if system initialization fails.DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCUI-80-000067 The vCenter UI service 'ErrorReportValve showServerInfo' must be set to 'false'.DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCUI-80-000130 The vCenter UI service DefaultServlet must be set to 'readonly' for 'PUT' and 'DELETE' commands.DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix

ACCESS CONTROL

VCUI-80-000136 The vCenter UI service debug parameter must be disabled.DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCUI-80-000139 The vCenter UI service must have Autodeploy disabled.DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCUI-80-000140 The vCenter UI service xpoweredBy attribute must be disabled.DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix

CONFIGURATION MANAGEMENT

VCUI-80-000142 The vCenter UI service default ROOT web application must be removed.DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix

CONFIGURATION MANAGEMENT