Item Search

NameAudit NamePluginCategory
1.1 Ensure Web Content Is on Non-System PartitionCIS IIS 7 L1 v1.8.0Windows

CONFIGURATION MANAGEMENT

1.2 Ensure 'host headers' are on all sitesCIS IIS 7 L1 v1.8.0Windows

CONFIGURATION MANAGEMENT

1.5 Ensure 'unique application pools' is set for sitesCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

2.3 Ensure 'forms authentication' require SSL - DefaultCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Disable Removable Volume Manager - rmvolmgrCIS Solaris 11 L1 v1.1.0Unix
2.12 Configure TCP Wrappers - hosts.allowCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.1 Restrict Core Dumps to Protected Directory - /var/coresCIS Solaris 11 L1 v1.1.0Unix
3.1 Restrict Core Dumps to Protected Directory - init core file patternCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

3.7 Disable Response to ICMP Broadcast Timestamp Requests - current ip = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.7 Disable Response to ICMP Broadcast Timestamp Requests - persistent ip = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.8 Configure MachineKey Validation Method - .Net 3.5 - DefaultCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.9 Disable Response to Broadcast ICMPv4 Echo Request - current ip = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.12 Set Strict Multihoming - persistent ipv6 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.13 Disable ICMP Redirect Messages - current ipv4 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.13 Disable ICMP Redirect Messages - persistent ipv4 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.13 Disable ICMP Redirect Messages - persistent ipv6 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.14 Disable TCP Reverse IP Source Routing - persistent tcp = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.15 Set Maximum Number of Half-open TCP Connections - current tcp = 4096CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.17 Disable Network Routing - ipv6-forwarding persistent = disabledCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.8 Ensure Handler is not granted Write and Script/Execute - ApplicationsCIS IIS 7 L1 v1.8.0Windows

ACCESS CONTROL

4.11 Ensure 'Dynamic IP Address Restrictions' is enabled - Deny By Conccurent RequestsCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

5.2 Ensure Advanced IIS logging is enabledCIS IIS 7 L1 v1.8.0Windows

AUDIT AND ACCOUNTABILITY

6.1 Ensure FTP requests are encrypted - Control Channel DefaultCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

6.1 Ensure FTP requests are encrypted - Data Channel DefaultCIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

6.2 Disable 'nobody' Access for RPC Encryption Key Storage ServiceCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Blocking Authentication Using Empty/Null Passwords for SSH - PermitEmptyPasswords = noCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

6.10 Set Delay between Failed Login Attempts to 4 - SLEEPTIME = 4CIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.11 Remove Autologin Capabilities from the GNOME desktopCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.13 Restrict at/cron to Authorized Users - /etc/cron.d/at.allow permsCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.15 Set Retry Limit for Account Lockout - LOCK_AFTER_RETRIES = yesCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.16 Set EEPROM Security Mode and Log Failed Access (SPARC) - eeprom security-#badlogins = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

6.16 Set EEPROM Security Mode and Log Failed Access (SPARC) - eeprom security-mode = commandCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

7.2 Set Strong Password Creation Policies - DICTIONLIST = /usr/share/lib/dict/wordsCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - MINLOWER = 1CIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.10 Ensure RC4 Cipher Suites is disabled - RC4 128/128CIS IIS 7 L1 v1.8.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

8.1 Create Warnings for Standard Login Services - etc/motd contentsCIS Solaris 11.2 L1 v1.1.0Unix

ACCESS CONTROL

8.1 Create Warnings for Standard Login Services - etc/motd contentsCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

8.2 Enable a Warning Banner for the SSH Service - Banner = /etc/issueCIS Solaris 11.2 L1 v1.1.0Unix

ACCESS CONTROL

8.3 Enable a Warning Banner for the GNOME ServiceCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.3 Verify System Account Default Passwords - lockedCIS Solaris 11.2 L1 v1.1.0Unix

ACCESS CONTROL

9.3 Verify System Account Default Passwords - lockedCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.3 Verify System Account Default Passwords - non-loginCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.6 Ensure root PATH Integrity - dot in pathCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.6 Ensure root PATH Integrity - dot in pathCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.16 Check for Duplicate GIDsCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

9.19 Check for Presence of User .netrc FilesCIS Solaris 11.2 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

9.20 Check for Presence of User .forward FilesCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.23 Find Un-owned Files and DirectoriesCIS Solaris 11.2 L1 v1.1.0Unix

ACCESS CONTROL

9.25 Find Files and Directories with Extended AttributesCIS Solaris 11 L1 v1.1.0Unix
10.2 SN.2 Remove Support for Internet Services (inetd)CIS Solaris 11 L2 v1.1.0Unix