Item Search

NameAudit NamePluginCategory
1.001 - Physical security of the Automated Information System (AIS) does not meet DISA requirements.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

1.2.3 (L1) Ensure 'Allow Administrator account lockout' is set to 'Enabled'CIS Microsoft Windows 10 EMS Gateway v3.0.0 L1Windows

ACCESS CONTROL

1.2.3 (L1) Ensure 'Allow Administrator account lockout' is set to 'Enabled' (MS only)CIS Windows Server 2012 MS L1 v3.0.0Windows

ACCESS CONTROL

1.28 WN11-00-000126CIS Microsoft Windows 11 STIG v1.2.0 CAT IIWindows

CONFIGURATION MANAGEMENT

1.98 WN11-AU-000582CIS Microsoft Windows 11 STIG v1.2.0 CAT IIWindows

AUDIT AND ACCOUNTABILITY

1.99 WN11-AU-000583CIS Microsoft Windows 11 STIG v1.2.0 CAT IIWindows

AUDIT AND ACCOUNTABILITY

1.100 WN11-AU-000584CIS Microsoft Windows 11 STIG v1.2.0 CAT IIWindows

AUDIT AND ACCOUNTABILITY

1.105 WN11-AU-000589CIS Microsoft Windows 11 STIG v1.2.0 CAT IIWindows

AUDIT AND ACCOUNTABILITY

5.4 Capture messages sent to syslog AUTH facility - Check if 'auth.info' is set to /var/log/authlogCIS Solaris 9 v1.3Unix
6.8 Disable Host-based Authentication for Login-based Services - rsh auth sufficient pam_rhosts_auth.so.1 /etc/pam.d/*CIS Solaris 11.2 L1 v1.1.0Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

9.23 Find SUID/SGID System ExecutablesCIS Solaris 11.1 L1 v1.0.0Unix

ACCESS CONTROL

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.10.77.1.3 Ensure 'Notify Password Reuse' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BLWindows

SYSTEM AND INFORMATION INTEGRITY

18.10.77.1.3 Ensure 'Notify Password Reuse' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

SYSTEM AND INFORMATION INTEGRITY

AMLS-L2-000110 - The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.DISA STIG Arista MLS DCS-7000 Series L2S v1r3Arista

ACCESS CONTROL

ARST-L2-000160 - The Arista MLS layer 2 switch must have all trunk links enabled statically.DISA Arista MLS EOS 4.X L2S STIG v2r3Arista

CONFIGURATION MANAGEMENT

Big Sur - Disable Hot CornersNIST macOS Big Sur v1.4.0 - 800-53r5 HighUnix

ACCESS CONTROL

Big Sur - Enforce Screen Saver at Login WindowNIST macOS Big Sur v1.4.0 - 800-53r5 ModerateUnix

ACCESS CONTROL

Big Sur - Enforce Screen Saver at Login WindowNIST macOS Big Sur v1.4.0 - 800-53r4 ModerateUnix

ACCESS CONTROL

Big Sur - Enforce Screen Saver at Login WindowNIST macOS Big Sur v1.4.0 - All ProfilesUnix

ACCESS CONTROL

Big Sur - Enforce Screen Saver at Login WindowNIST macOS Big Sur v1.4.0 - CNSSI 1253Unix

ACCESS CONTROL

Big Sur - FileVault Authorized UsersNIST macOS Big Sur v1.4.0 - 800-53r5 HighUnix

ACCESS CONTROL

Big Sur - FileVault Authorized UsersNIST macOS Big Sur v1.4.0 - All ProfilesUnix

ACCESS CONTROL

DG0127-ORACLE11 - DBMS account passwords should not be set to easily guessed words or values - 'name'DISA STIG Oracle 11 Instance v9r1 DatabaseOracleDB

IDENTIFICATION AND AUTHENTICATION

DG0127-ORACLE11 - DBMS account passwords should not be set to easily guessed words or values - 'profile'DISA STIG Oracle 11 Instance v9r1 DatabaseOracleDB
GOOG-11-000500 - Google Android 11 must be configured to not allow more than ten consecutive failed authentication attempts.AirWatch - DISA Google Android 11 COPE v2r1MDM

ACCESS CONTROL

GOOG-11-000500 - Google Android 11 must be configured to not allow more than ten consecutive failed authentication attempts.AirWatch - DISA Google Android 11 COBO v2r1MDM

ACCESS CONTROL

GOOG-11-000500 - Google Android 11 must be configured to not allow more than ten consecutive failed authentication attempts.MobileIron - DISA Google Android 11 COBO v2r1MDM

ACCESS CONTROL

GOOG-11-001100 - Google Android 11 allow list must be configured to not include applications with the following characteristics:AirWatch - DISA Google Android 11 COBO v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-11-001100 - Google Android 11 allow list must be configured to not include applications with the following characteristics:MobileIron - DISA Google Android 11 COBO v2r1MDM

CONFIGURATION MANAGEMENT

Management interfaceArubaOS CX 10.x Hardening Guide v1.0.0ArubaOS

SYSTEM AND COMMUNICATIONS PROTECTION

MOTS-11-000500 - Motorola Solutions Android 11 must be configured to not allow more than ten consecutive failed authentication attempts.MobileIron - DISA Motorola Solutions Android 11 COBO v1r3MDM

ACCESS CONTROL

MOTS-11-011000 - Motorola Solutions Android 11 devices must be configured to disable the use of third-party keyboards.AirWatch - DISA Motorola Solutions Android 11 COBO v1r3MDM

CONFIGURATION MANAGEMENT

MOTS-11-011000 - Motorola Solutions Android 11 devices must be configured to disable the use of third-party keyboards.MobileIron - DISA Motorola Solutions Android 11 COBO v1r3MDM

CONFIGURATION MANAGEMENT

MSFT-11-000500 - Microsoft Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts.MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL

MSFT-11-000500 - Microsoft Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts.AirWatch - DISA Microsoft Android 11 COPE v1r2MDM

ACCESS CONTROL

MSFT-11-001100 - Microsoft Android 11 allow list must be configured to not include applications with the following characteristics:MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-005400 - Microsoft Android 11 must allow the Administrator (EMM) to perform the following management function: Wipe Enterprise data.AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL, CONFIGURATION MANAGEMENT

PHTN-67-000032 - The Photon operating system must only allow installation of packages signed by VMware.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

ZEBR-11-000500 - Zebra Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts.MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

ACCESS CONTROL

ZEBR-11-000500 - Zebra Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts.AirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

ACCESS CONTROL

ZEBR-11-001100 - Zebra Android 11 allow list must be configured to not include applications with the following characteristics:AirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT