Item Search

NameAudit NamePluginCategory
1.1.1 Ensure default password of root is not allowedCIS F5 Networks v1.0.0 L1F5

IDENTIFICATION AND AUTHENTICATION

1.1.1.1 Set 'Account lockout threshold' to '5 invalid logon attempt(s)'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.1.4 Set 'Minimum password length' to '14 or more character(s)'CIS Windows 8 L1 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

1.1.1.7 Set 'Store passwords using reversible encryption' to 'Disabled'CIS Windows 8 L1 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

1.1.2.6 Set 'Audit Policy: Policy Change: MPSSVC Rule-Level Policy Change' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.11 Set 'Audit Policy: Account Management: Computer Account Management' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.13 Set 'Audit Policy: System: Security State Change' to 'Success and Failure'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.17 Set 'Audit Policy: Account Management: Security Group Management' to 'Success and Failure'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.19 Set 'Audit Policy: Object Access: Registry' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.23 Set 'Audit Policy: Policy Change: Authorization Policy Change' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.32 Set 'Audit Policy: Policy Change: Audit Policy Change' to 'Success and Failure'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.38 Set 'Audit Policy: Object Access: Filtering Platform Packet Drop' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.46 Set 'Audit Policy: Object Access: Removable Storage' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.48 Set 'Audit Policy: Account Logon: Credential Validation' to 'Success and Failure'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.49 Set 'Audit Policy: Account Logon: Kerberos Service Ticket Operations' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.51 Set 'Audit Policy: Detailed Tracking: Process Creation' to 'Success'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.53 Set 'Audit Policy: Object Access: SAM' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.55 Set 'Audit Policy: Policy Change: Authentication Policy Change' to 'Success'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.3.1.1 Set 'Accounts: Block Microsoft accounts' to 'Users can't add or log on with Microsoft accounts'CIS Windows 8 L1 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

1.1.3.1.5 Set 'Accounts: Guest account status' to 'Disabled'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.3.2.3 Configure Audit: Audit the use of Backup and Restore privilegeCIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.3.5.1 Set 'Domain member: Require strong (Windows 2000 or later) session key' to 'Enabled'CIS Windows 8 L1 v1.0.0Windows

CONFIGURATION MANAGEMENT

1.1.3.6.9 Configure 'Interactive logon: Message text for users attempting to log on'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.3.9.11 Configure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 default)'CIS Windows 8 L1 v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

1.1.3.10.2 Set 'Network access: Allow anonymous SID/Name translation' to 'Disabled'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

1.1.3.10.4 Configure 'Network access: Named Pipes that can be accessed anonymously'CIS Windows 8 L1 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

1.1.3.11.3 Configure Network access: Shares that can be accessed anonymouslyCIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.3.15.2 Set 'System objects: Require case insensitivity for nonWindows subsystems' to 'Enabled'CIS Windows 8 L1 v1.0.0Windows

CONFIGURATION MANAGEMENT

1.1.3.16.1 Configure 'System settings: Optional subsystems'CIS Windows 8 L1 v1.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

1.1.3.17.9 Set 'User Account Control: Only elevate executables that are signed and validated' to 'Disabled'CIS Windows 8 L1 v1.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

1.1.4.10 Set 'Create global objects' to 'Administrators, SERVICE, LOCAL SERVICE, NETWORK SERVICE'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.4.11 Set 'Enable computer and user accounts to be trusted for delegation' to 'No One'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.4.13 Set 'Shut down the system' to 'Administrators, Users'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.4.14 Set 'Take ownership of files or other objects' to 'Administrators'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.4.15 Set 'Create symbolic links' to 'Administrators'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

1.1.4.21 Set 'Deny log on locally' to 'Guests'CIS Windows 8 L1 v1.0.0Windows

ACCESS CONTROL

2.2 Ensure redundant remote authentication servers are configuredCIS F5 Networks v1.0.0 L2F5

ACCESS CONTROL

2.3 Ensure that "Fallback to local" option is disabled for Remote Authentication SettingsCIS F5 Networks v1.0.0 L2F5

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

2.5 Ensure External Users' has access to needed Partitions onlyCIS F5 Networks v1.0.0 L1F5

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

3.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for Configuration utility sessionsCIS F5 Networks v1.0.0 L1F5

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

4.1 Ensure Prelogin 'Login Banner' is setCIS F5 Networks v1.0.0 L1F5

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

4.6 Ensure to set SSH MAC algorithm to hmac-sha2-256CIS F5 Networks v1.0.0 L1F5

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

5.1 Ensure redundant NTP servers are configured appropriatelyCIS F5 Networks v1.0.0 L1F5

AUDIT AND ACCOUNTABILITY

7.2 Set Strong Password Creation Policies - MINLOWER = 1CIS Solaris 11.1 L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

8.1 Create Warnings for Standard Login Services - etc/motd permsCIS Solaris 11.1 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

9.6 Ensure root PATH Integrity - writeable dir in pathCIS Solaris 11.1 L1 v1.0.0Unix

ACCESS CONTROL

9.14 Check User Home Directory OwnershipCIS Solaris 11.1 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

9.17 Check That Reserved UIDs Are Assigned to System AccountsCIS Solaris 11.1 L1 v1.0.0Unix

ACCESS CONTROL

9.20 Check for Presence of User .netrc FilesCIS Solaris 11.1 L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

10.1 SN.1 Restrict access to suspend featureCIS Solaris 11.1 L2 v1.0.0Unix

ACCESS CONTROL