Item Search

NameAudit NamePluginCategory
3.123 - Auditing Access of Global System Objects must be turned off.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

AMLS-L3-000270 - The Arista Multilayer Switch must manage excess bandwidth to limit the effects of packet flooding types of denial of service (DoS) attacks - DoS attacks.DISA STIG Arista MLS DCS-7000 Series RTR v1r3Arista

SYSTEM AND COMMUNICATIONS PROTECTION

BIND-9X-001054 - A BIND 9.x server implementation must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of Denial of Service (DoS) attacks - options allow-queryDISA BIND 9.x STIG v2r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-L2-000040 - The Cisco switch must manage excess bandwidth to limit the effects of packet-flooding types of denial-of-service (DoS) attacks.DISA STIG Cisco IOS Switch L2S v2r4Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000610 - The MPLS router with RSVP-TE enabled must be configured with message pacing to adjust maximum burst and maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core routers.DISA STIG Cisco IOS XE Router RTR v2r9Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000610 - The MPLS router with RSVP-TE enabled must be configured with message pacing to adjust maximum burst and maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core routers.DISA STIG Cisco IOS-XR Router RTR v2r4Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000610 - The MPLS switch with RSVP-TE enabled must be configured with message pacing to adjust maximum burst and maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core switches.DISA STIG Cisco IOS XE Switch RTR v2r5Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000700 - The Cisco PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.DISA STIG Cisco IOS XE Router RTR v2r9Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000700 - The Cisco PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.DISA STIG Cisco IOS-XR Router RTR v2r4Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000700 - The Cisco PE switch providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.DISA STIG Cisco IOS XE Switch RTR v2r5Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000760 - The Cisco PE switch must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.DISA STIG Cisco NX-OS Switch RTR v2r3Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000770 - The Cisco P router must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications - QoS policy in accordance with the QoS DODIN Technical Profile.DISA STIG Cisco IOS Router RTR v2r6Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000780 - The Cisco PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks - DoS attacks.DISA STIG Cisco IOS Router RTR v2r6Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000780 - The Cisco PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks - DoS attacks.DISA STIG Cisco IOS-XR Router RTR v2r4Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000780 - The Cisco switch must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.DISA STIG Cisco IOS Switch RTR v2r5Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

DKER-EE-002770 - Docker Enterprise container health must be checked at runtime.DISA STIG Docker Enterprise 2.x Linux/Unix v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

DKER-EE-002780 - PIDs cgroup limits must be used in Docker Enterprise.DISA STIG Docker Enterprise 2.x Linux/Unix v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000175 - Exchange Message size restrictions must be controlled on Receive connectors.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000185 - Exchange Receive connectors must be clearly named.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000190 - The Exchange Receive Connector Maximum Hop Count must be 60.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000200 - Exchange Send connectors delivery retries must be controlled.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000215 - The Exchange global inbound message size must be controlled.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000225 - The Exchange Outbound Connection Limit per Domain Count must be controlled.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-ED-000250 - Exchange Send connectors delivery retries must be controlled.DISA Microsoft Exchange 2016 Edge Transport Server STIG v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-ED-000280 - Exchange Receive connectors must be clearly named.DISA Microsoft Exchange 2016 Edge Transport Server STIG v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-ED-000290 - Exchange Receive connectors must control the number of recipients chunked on a single message.DISA Microsoft Exchange 2016 Edge Transport Server STIG v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-ED-000300 - Exchange Receive connectors must control the number of recipients per message.DISA Microsoft Exchange 2016 Edge Transport Server STIG v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-MB-000350 - Exchange Message size restrictions must be controlled on Receive connectors.DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-MB-000360 - Exchange Receive connectors must control the number of recipients per message.DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-MB-000380 - The Exchange Receive Connector Maximum Hop Count must be 60.DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-MB-000450 - The Exchange Outbound Connection Limit per Domain Count must be controlled.DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6Windows

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000320 - The Juniper MPLS router with RSVP-TE enabled must be configured to enable refresh reduction features.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000330 - The Juniper PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000340 - The Juniper PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000350 - The Juniper PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS DODIN Technical Profile.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000590 - The Juniper MPLS router with RSVP-TE enabled must be configured to enable refresh reduction features.DISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000680 - The Juniper PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces - policerDISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000680 - The Juniper PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces - trafficDISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000740 - The Juniper PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS GIG Technical Profile - class-of-serviceDISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUSX-IP-000005 - The Juniper Networks SRX Series Gateway IDPS must block outbound traffic containing known and unknown DoS attacks by ensuring that rules are applied to outbound communications traffic.DISA Juniper SRX Services Gateway IDPS v1r2Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUSX-IP-000006 - The Juniper Networks SRX Series Gateway IDPS must block outbound traffic containing known and unknown DoS attacks by ensuring that signature-based objects are applied to outbound communications traffic.DISA Juniper SRX Services Gateway IDPS v1r2Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

OL6-00-000095 - The system must be configured to use TCP syncookies when experiencing a TCP SYN flood.DISA STIG Oracle Linux 6 v2r7Unix

SYSTEM AND COMMUNICATIONS PROTECTION

PANW-IP-000018 - The Palo Alto Networks security platform must have a DoS Protection Profile for outbound traffic applied to a policy for traffic originating from the internal zone going to the external zone.DISA STIG Palo Alto IDPS v2r3Palo_Alto

SYSTEM AND COMMUNICATIONS PROTECTION

PHTN-30-000036 - The Photon operating system must use Transmission Control Protocol (TCP) syncookies.DISA STIG VMware vSphere 7.0 Photon OS v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-06-000095 - The system must be configured to use TCP syncookies when experiencing a TCP SYN flood - configDISA Red Hat Enterprise Linux 6 STIG v2r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-090280 - The operating system must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial of service attacks.DISA STIG Solaris 11 X86 v2r9Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCWN-06-000007 - The system must limit the effects of information-flooding types of Denial of Service (DoS) attacks.DISA STIG VMware vSphere vCenter 6.x v1r4VMware

SYSTEM AND COMMUNICATIONS PROTECTION

WN12-SO-000007 - Auditing the Access of Global System Objects must be turned off.DISA Windows Server 2012 and 2012 R2 DC STIG v3r7Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN12-SO-000008 - Auditing of Backup and Restore Privileges must be turned off.DISA Windows Server 2012 and 2012 R2 MS STIG v3r7Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN12-SO-000008 - Auditing of Backup and Restore Privileges must be turned off.DISA Windows Server 2012 and 2012 R2 DC STIG v3r7Windows

SYSTEM AND COMMUNICATIONS PROTECTION