Item Search

NameAudit NamePluginCategory
DG0019-ORACLE11 - Application software should be owned by a Software Application account - 'Oracle home directory file permissions are correct'DISA STIG Oracle 11 Installation v9r1 WindowsWindows

CONFIGURATION MANAGEMENT

DG0019-ORACLE11 - Application software should be owned by a Software Application account.DISA STIG Oracle 11 Installation v9r1 LinuxUnix

CONFIGURATION MANAGEMENT

DG0104-ORACLE11 - DBMS service identification should be unique and clearly identifies the service - 'All Oracle services use the proper naming'DISA STIG Oracle 11 Installation v9r1 WindowsWindows

CONFIGURATION MANAGEMENT

DO0145-ORACLE11 - OS DBA group membership should be restricted to authorized accounts.DISA STIG Oracle 11 Installation v9r1 LinuxUnix

ACCESS CONTROL

DO0430-ORACLE11 - The Oracle Management Agent should be uninstalled if not required and authorized or is installed on a database accessible from the Internet.DISA STIG Oracle 11 Installation v9r1 LinuxUnix

CONFIGURATION MANAGEMENT

DO0430-ORACLE11 - The Oracle Management Agent should be uninstalled if not required and authorized or is installed on a database accessible from the Internet.DISA STIG Oracle 11 Installation v9r1 WindowsWindows

CONFIGURATION MANAGEMENT

DO6746-ORACLE11 - The Oracle listener.ora file should specify IP addresses rather than host names to identify hosts - '%ORACLE_HOME%\NETWORK\ADMIN\listener.ora HOST does not use hostname'DISA STIG Oracle 11 Installation v9r1 WindowsWindows

CONFIGURATION MANAGEMENT

DTBI750 - Updates to web site lists from Microsoft must be disallowed.DISA STIG Microsoft Internet Explorer 9 v1r15Windows

CONFIGURATION MANAGEMENT

NET0720 - TCP and UDP small server services are not disabled - 'service tcp-small-servers'DISA STIG Cisco L2 Switch V8R27Cisco

CONFIGURATION MANAGEMENT

NET0720 - TCP and UDP small server services are not disabled - 'service udp-small-servers'DISA STIG Cisco L2 Switch V8R27Cisco

CONFIGURATION MANAGEMENT

NET0722 - The PAD service is enabled.DISA STIG Cisco L2 Switch V8R27Cisco

CONFIGURATION MANAGEMENT

NET0724 - TCP Keep-Alives must be enabled.DISA STIG Cisco L2 Switch V8R27Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

NET0812 - Two NTP servers are not used to synchronize time - 'ntp broadcast client'DISA STIG Cisco L2 Switch V8R27Cisco

CONFIGURATION MANAGEMENT

NET0812 - Two NTP servers are not used to synchronize time - 'ntp multicast client MULTICAST_IP_1'DISA STIG Cisco L2 Switch V8R27Cisco

CONFIGURATION MANAGEMENT

NET0812 - Two NTP servers are not used to synchronize time - 'ntp multicast client MULTICAST_IP_2'DISA STIG Cisco L2 Switch V8R27Cisco

CONFIGURATION MANAGEMENT

NET0812 - Two NTP servers are not used to synchronize time - 'ntp update-calendar'DISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET0820 - DNS servers must be defined for client resolver.DISA STIG Cisco L2 Switch V8R27Cisco

CONFIGURATION MANAGEMENT

NET1021 - The network element must log all messages except debugging - 'Logging buffered'DISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET1021 - The network element must log all messages except debugging - 'Logging console notifications'DISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET1021 - The network element must log all messages except debugging - 'Logging trap'DISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET1021 - The network element must log all messages except debugging - 'No logging trap'DISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET1021 - The network element must log all messages except debugging- 'Debugging on'DISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET1021 - The network element must log all messages except debugging- 'Logging on'DISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET1629 - The auxiliary port is not disabledDISA STIG Cisco L2 Switch V8R27Cisco

CONFIGURATION MANAGEMENT

NET1640 - Management connections must be logged - logging onDISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET1640 - Management connections must be logged - login failureDISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

NET1640 - Management connections must be logged - login successDISA STIG Cisco L2 Switch V8R27Cisco

AUDIT AND ACCOUNTABILITY

WA000-WI070 IIS6 - Indexing Services must only index web content.DISA STIG IIS 6.0 Site Checklist v6r16Windows

CONFIGURATION MANAGEMENT

WA000-WI120 IIS6 - The Content Location header must not contain proprietary IP addresses.DISA STIG IIS 6.0 Site Checklist v6r16Windows

CONFIGURATION MANAGEMENT

WA120 IIS6 - Administrative users and groups with access privilege to the web server must be documented.DISA STIG IIS 6.0 Server v6r16Windows

IDENTIFICATION AND AUTHENTICATION

WA140 IIS6 - Web server content and configuration files must be part of a routine backup program.DISA STIG IIS 6.0 Server v6r16Windows

CONTINGENCY PLANNING

WG130 IIS6 - Programs and features not necessary for operations must be removed.DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG130 W22 - All utility programs, not necessary for operations, must be removed or disabled.DISA STIG Apache Server 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WG265 A22 - The required DoD banner page must be displayed to authenticated users accessing a DoD private website.DISA STIG Apache Site 2.2 Unix v1r11 MiddlewareUnix

ACCESS CONTROL

WG265 A22 - The required DoD banner page must be displayed to authenticated users accessing a DoD private website.DISA STIG Apache Site 2.2 Unix v1r11Unix

ACCESS CONTROL

WG265 IIS6 - The required DoD banner page must be displayed to authenticated users accessing a DoD private website.DISA STIG IIS 6.0 Site Checklist v6r16Windows

ACCESS CONTROL

WG265 W22 - The required DoD banner page must be displayed to authenticated users accessing a DoD private website.DISA STIG Apache Site 2.2 Windows v1r13Windows

ACCESS CONTROL

WG420 A22 - Backup interactive scripts on the production web server are prohibited - ??0DISA STIG Apache Server 2.2 Unix v1r11Unix

CONFIGURATION MANAGEMENT

WG420 A22 - Backup interactive scripts on the production web server are prohibited - ??0DISA STIG Apache Server 2.2 Unix v1r11 MiddlewareUnix

CONFIGURATION MANAGEMENT

WG420 A22 - Backup interactive scripts on the production web server are prohibited - backupDISA STIG Apache Server 2.2 Unix v1r11 MiddlewareUnix

CONFIGURATION MANAGEMENT

WG420 W22 - Backup interactive scripts on the production web server must be prohibited.DISA STIG Apache Server 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WG490 A22 - Java software on production web servers must be limited to class files and the JAVA virtual machine - cgi-binDISA STIG Apache Site 2.2 Unix v1r11Unix

CONFIGURATION MANAGEMENT

WG490 W22 - Java software on production web servers must be limited to class files and the JAVA virtual machine. - 'Alias - *.java'DISA STIG Apache Site 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WG490 W22 - Java software on production web servers must be limited to class files and the JAVA virtual machine. - 'DocumentRoot - *.java'DISA STIG Apache Site 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WG490 W22 - Java software on production web servers must be limited to class files and the JAVA virtual machine. - 'DocumentRoot - *.jpp'DISA STIG Apache Site 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WG490 W22 - Java software on production web servers must be limited to class files and the JAVA virtual machine. - 'ScriptAlias - *.java'DISA STIG Apache Site 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WG490 W22 - Java software on production web servers must be limited to class files and the JAVA virtual machine. - 'ScriptAlias - *.jpp'DISA STIG Apache Site 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WG490 W22 - Java software on production web servers must be limited to class files and the JAVA virtual machine. - 'ScriptAlias_Match - *.java'DISA STIG Apache Site 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WG520 IIS6 - Web server and/or operating system information must be protected.DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG520 W22 - Web server and/or operating system information must be protected.DISA STIG Apache Server 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT