Item Search

NameAudit NamePluginCategory
GEN003600 - The system must not forward IPv4 source-routed packets.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003600 - The system must not forward IPv4 source-routed packets.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003602 - The system must not process ICMP timestamp requests.DISA STIG AIX 6.1 v1r13Unix
GEN003602 - The system must not process ICMP timestamp requests.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requestsDISA STIG HP-UX 11.31 v1r19Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-reply -j DROP'DISA STIG for Red Hat Enterprise Linux 5 v1r17 AuditUnix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast address.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast address.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast address.DISA STIG for Red Hat Enterprise Linux 5 v1r17 AuditUnix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003604 - The system must not respond to ICMP timestamp requests sent to a broadcast address.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003604 - The system must not respond to ICMP timestamp requests sent to a broadcast address.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003605 - The system must not apply reversed source routing to TCP responses.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003605 - The system must not apply reversed source routing to TCP responses.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003606 - The system must prevent local applications from generating source-routed packets.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003606 - The system must prevent local applications from generating source-routed packets.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003607 - The system must not accept source-routed IPv4 packets.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003607 - The system must not accept source-routed IPv4 packets.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003608 - Proxy ARP must not be enabled on the system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003610 - The system must not send IPv4 ICMP redirects.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003610 - The system must not send IPv4 ICMP redirects.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003611 - The system must log martian packets - 'net.ipv4.conf.all.log_martians'DISA STIG for Red Hat Enterprise Linux 5 v1r17 AuditUnix

AUDIT AND ACCOUNTABILITY

GEN003611 - The system must log martian packets - 'net.ipv4.conf.default.log_martians'DISA STIG for Red Hat Enterprise Linux 5 v1r17 AuditUnix

AUDIT AND ACCOUNTABILITY

GEN003860 - The system must not have the finger service active.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003860 - The system must not have the finger service active.DISA STIG for Oracle Linux 5 v1r14Unix

CONFIGURATION MANAGEMENT

GEN007660 - The Bluetooth protocol handler must be disabled or not installed - 'install bluetooth /bin/true'DISA STIG for Red Hat Enterprise Linux 5 v1r17 AuditUnix
GEN007660 - The Bluetooth protocol handler must be disabled or not installed - 'install bluetooth /bin/true'DISA STIG for Oracle Linux 5 v1r14Unix
GEN007700 - The IPv6 protocol handler must not be bound to the network stack unless needed.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007720 - The IPv6 protocol handler must be prevented from dynamic loading unless needed.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007760 - Proxy Neighbor Discovery Protocol (NDP) must not be enabled on the system.DISA STIG AIX 6.1 v1r13Unix

CONFIGURATION MANAGEMENT

GEN007760 - Proxy Neighbor Discovery Protocol (NDP) must not be enabled on the system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007780 - The system must not have 6to4 enabled.DISA STIG for Oracle Linux 5 v1r14Unix
GEN007780 - The system must not have 6to4 enabled.DISA STIG for Red Hat Enterprise Linux 5 v1r17 AuditUnix
GEN007780 - The system must not have 6to4 enabled.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007780 - The system must not have 6to4 enabled.DISA STIG AIX 6.1 v1r13Unix

CONFIGURATION MANAGEMENT

GEN007820 - The system must not have IP tunnels configuredDISA STIG HP-UX 11.31 v1r19Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007820 - The system must not have IP tunnels configured - '/sbin/ip tun list'DISA STIG for Oracle Linux 5 v1r14Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007820 - The system must not have IP tunnels configured - 'ifconfig -a'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007820 - The system must not have IP tunnels configured - 'lstun -a'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007820 - The system must not have IP tunnels configured - 'lstun -a'DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007860 - The system must ignore IPv6 ICMP redirect messages.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007860 - The system must ignore IPv6 ICMP redirect messages.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007880 - The system must not send IPv6 ICMP redirects.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007880 - The system must not send IPv6 ICMP redirects.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007900 - The system must use an appropriate reverse-path filter for IPv6 network traffic, if the system uses IPv6.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007900 - The system must use an appropriate reverse-path filter for IPv6 network traffic, if the system uses IPv6.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007920 - The system must not forward IPv6 source-routed packets - 'net.ipv6.conf.default.forwarding'DISA STIG for Red Hat Enterprise Linux 5 v1r17 AuditUnix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007920 - The system must not forward IPv6 source-routed packets.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007920 - The system must not forward IPv6 source-routed packets.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007940 - The system must not accept source-routed IPv6 packets.DISA STIG AIX 6.1 v1r13Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN007940 - The system must not accept source-routed IPv6 packets.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL