Item Search

NameAudit NamePluginCategory
5.249 - Meeting SpaceDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

DTBI015-IE11 - The Internet Explorer warning about certificate address mismatch must be enforced.DISA STIG IE 11 v2r7Windows

CONFIGURATION MANAGEMENT

DTBI018-IE11 - Check for publishers certificate revocation must be enforced.DISA STIG IE 11 v2r7Windows

IDENTIFICATION AND AUTHENTICATION

DTBI024-IE11 - The Initialize and script ActiveX controls not marked as safe property must be disallowed (Internet zone).DISA STIG IE 11 v2r7Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO126 - Add-on Management functionality must be allowed.DISA STIG Microsoft OneDrive v2r4Windows

SYSTEM AND COMMUNICATIONS PROTECTION

FNFG-FW-000090 - The FortiGate firewall must fail to a secure state if the firewall filtering functions fail unexpectedly.DISA Fortigate Firewall STIG v1r4FortiGate

SYSTEM AND COMMUNICATIONS PROTECTION

FNFG-FW-000105 - If communication with the central audit server is lost, the FortiGate firewall must generate a real-time alert to, at a minimum, the SA and ISSO.DISA Fortigate Firewall STIG v1r4FortiGate

AUDIT AND ACCOUNTABILITY

FNFG-FW-000130 - The FortiGate firewall must restrict traffic entering the VPN tunnels to the management network to only the authorized management packets based on destination address.DISA Fortigate Firewall STIG v1r4FortiGate

SYSTEM AND COMMUNICATIONS PROTECTION

FNFG-FW-000150 - The FortiGate firewall must generate an alert that can be forwarded to, at a minimum, the Information System Security Officer (ISSO) and Information System Security Manager (ISSM) when denial-of-service (DoS) incidents are detected.DISA Fortigate Firewall STIG v1r4FortiGate

SYSTEM AND INFORMATION INTEGRITY

SHPT-00-000010 - SharePoint must maintain and support the use of organizationally defined security attributes to stored information.DISA STIG SharePoint 2010 v1r9Windows

ACCESS CONTROL

SHPT-00-000100 - SharePoint must enforce dual authorization, based on organizational policies and procedures for organizationally defined privileged commands.DISA STIG SharePoint 2010 v1r9Windows

ACCESS CONTROL

SHPT-00-000235 - SharePoint clients must be configured to display an approved system use notification message or banner before granting access to the system.DISA STIG SharePoint 2010 v1r9Windows

ACCESS CONTROL

SHPT-00-000431 - SharePoint must protect audit information from unauthorized access to the trace data log files.DISA STIG SharePoint 2010 v1r9Windows

AUDIT AND ACCOUNTABILITY

SHPT-00-000436 - SharePoint must protect audit information from unauthorized modification to trace data logs.DISA STIG SharePoint 2010 v1r9Windows

AUDIT AND ACCOUNTABILITY

SHPT-00-000475 - To support the requirements and principles of least functionality; SharePoint must support the organizational requirement to provide only essential capabilities.DISA STIG SharePoint 2010 v1r9Windows

CONFIGURATION MANAGEMENT

SHPT-00-000495 - Backup of SharePoint system level files for critical systems must be performed when identified as required by the owning organization.DISA STIG SharePoint 2010 v1r9Windows

CONTINGENCY PLANNING

SHPT-00-000531 - SharePoint sites must not use NTLM - SharePoint sites must not use NTLM.DISA STIG SharePoint 2010 v1r9Windows

IDENTIFICATION AND AUTHENTICATION

SHPT-00-000645 - SharePoint must terminate the network connection associated with a communications session at the end of the session or after an organizationally defined time period of inactivity - 'FormDigestSettings.Enabled = True'DISA STIG SharePoint 2010 v1r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

SHPT-00-000683 - SharePoint-specific malware (i.e., anti-virus) software must be integrated and configured - 'Scan Documents on Upload is enabled'DISA STIG SharePoint 2010 v1r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

SHPT-00-000690 - The Central Administration site must not be accessible from Extranet or Internet connections.DISA STIG SharePoint 2010 v1r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

SHPT-00-000692 - Access to Central Administration site must be limited to authorized users and groups.DISA STIG SharePoint 2010 v1r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

SHPT-00-000805 - The organization must employ cryptographic mechanisms to prevent unauthorized disclosure of information during transmission unless otherwise protected by alternative physical measures.DISA STIG SharePoint 2010 v1r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WINCC-000079 - EMET Default Protections for Internet Explorer must be enabled.DISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000080 - EMET Default Protections for Recommended Software must be enabled. - EXCEL.EXEDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000080 - EMET Default Protections for Recommended Software must be enabled. - javaws.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000080 - EMET Default Protections for Recommended Software must be enabled. - VISIO.EXEDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000080 - EMET Default Protections for Recommended Software must be enabled. - VPREVIEW.EXEDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - 7zFM.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - 7zG.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - communicator.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - iTunes.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - opera.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - QuickTimePlayer.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - SkyDrive.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - winamp.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - WindowsLiveWriter.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - winrar.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - WLXPhotoGallery.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000081 - EMET Default Protections for Popular Software must be enabled. - wmplayer.exeDISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000082 - EMET system-wide Data Execution Prevention (DEP) must be enabled and configured to at least Application Opt Out.DISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINCC-000147 - The touch keyboard or input panel must not highlight keys as passwords are entered. - PasswordSecurityDISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

WINER-000004 - The system must be configured to allow a local or DOD-wide collector to request additional error reporting.DISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINER-000006 - The system must be configured to prevent the display of error messages to the user.DISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINER-000007 - The system must be configured to store error reports locally, and not send them to Microsoft.DISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINER-000009 - The system must be configured to send error reports on TCP port 1232.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

WINER-000012 - The maximum number of error reports to archive on a system must be configured to 100 or greater.DISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINER-000015 - The maximum number of error reports to queue on a system must be configured to 50 or greater.DISA Windows Vista STIG v6r41Windows

SYSTEM AND INFORMATION INTEGRITY

WINFW-000001 - A host-based firewall must be installed and enabled on the system.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

WINUR-000017 - The Deny access to this computer from the network user right on workstations must be configured - guestsDISA Windows Vista STIG v6r41Windows

ACCESS CONTROL

WINUR-000018 - The Deny log on as a batch job user right must be configured to prevent access from highly privileged accounts.DISA Windows Vista STIG v6r41Windows

ACCESS CONTROL