Item Search

NameAudit NamePluginCategory
3.123 - Auditing Access of Global System Objects must be turned off.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.124 - Audit of Backup and Restore Privileges is not turned off.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

AMLS-L3-000270 - The Arista Multilayer Switch must manage excess bandwidth to limit the effects of packet flooding types of denial of service (DoS) attacks - DoS attacks.DISA STIG Arista MLS DCS-7000 Series RTR v1r3Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-L2-000030 - The Arista MLS layer 2 switch must be configured for Storm Control to limit the effects of packet flooding types of denial-of-service (DoS) attacks.DISA STIG Arista MLS EOS 4.2x L2S v1r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-RT-000290 - The MPLS router with RSVP-TE enabled must be configured with message pacing or refresh reduction to adjust maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core routers.DISA STIG Arista MLS EOS 4.2x Router v1r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-RT-000300 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.DISA STIG Arista MLS EOS 4.2x Router v1r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-RT-000310 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS DODIN Technical Profile.DISA STIG Arista MLS EOS 4.2x Router v1r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

ARST-RT-000320 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS GIG Technical Profile.DISA STIG Arista MLS EOS 4.2x Router v1r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

Big Sur - Limit Impact of Denial of Service AttacksNIST macOS Big Sur v1.4.0 - All ProfilesUnix

SYSTEM AND COMMUNICATIONS PROTECTION

BIND-9X-001054 - A BIND 9.x server implementation must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of Denial of Service (DoS) attacks - recursionDISA BIND 9.x STIG v2r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

BIND-9X-001054 - A BIND 9.x server implementation must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of Denial of Service (DoS) attacks - zone allow-queryDISA BIND 9.x STIG v2r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

CASA-FW-000150 - The Cisco ASA must be configured to enable threat detection to mitigate risks of denial-of-service (DoS) attacks.DISA STIG Cisco ASA FW v1r4Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

Catalina - Limit Impact of Denial of Service AttacksNIST macOS Catalina v1.5.0 - All ProfilesUnix

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000095 - Exchange Outbound Connection Timeout must be 10 minutes or less.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000100 - Exchange Outbound Connection Limit per Domain Count must be controlled.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000105 - Exchange Global Outbound Message size must be controlled.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000115 - Exchange Send connector connections count must be limited.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000120 - Exchange message size restrictions must be controlled on Send connectors.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000125 - Exchange Send connectors delivery retries must be controlled.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000130 - Exchange Send connectors must be clearly named.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000135 - Exchange Receive connector Maximum Hop Count must be 60.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000140 - Exchange Receive connectors must be clearly named.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000145 - Exchange Receive connectors must control the number of recipients chunked on a single message.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000150 - Exchange Receive connectors must control the number of recipients per message.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000155 - The Exchange Internet Receive connector connections count must be set to default.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-EG-000160 - Exchange Message size restrictions must be controlled on Receive connectors.DISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000180 - Exchange Receive connectors must control the number of recipients per message.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000195 - Exchange Send connectors must be clearly named.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

FNFG-FW-000075 - The FortiGate firewall implementation must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks.DISA Fortigate Firewall STIG v1r3FortiGate

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-L2-000040 - The Juniper EX switch must be configured to manage excess bandwidth to limit the effects of packet flooding types of denial of service (DoS) attacks.DISA Juniper EX Series Layer 2 Switch v1r2Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000320 - The Juniper MPLS router with RSVP-TE enabled must be configured to enable refresh reduction features.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000330 - The Juniper PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000340 - The Juniper PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000350 - The Juniper PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS DODIN Technical Profile.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUEX-RT-000360 - The Juniper P router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS GIG Technical Profile.DISA Juniper EX Series Router v1r3Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000680 - The Juniper PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces - routingDISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000750 - The Juniper P router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS GIG Technical Profile - QoS policy in accordance with the QoS DODIN Technical Profile.DISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000770 - The Juniper PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks - DoS attacks.DISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUSX-IP-000005 - The Juniper Networks SRX Series Gateway IDPS must block outbound traffic containing known and unknown DoS attacks by ensuring that rules are applied to outbound communications traffic.DISA Juniper SRX Services Gateway IDPS v1r2Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUSX-IP-000006 - The Juniper Networks SRX Series Gateway IDPS must block outbound traffic containing known and unknown DoS attacks by ensuring that signature-based objects are applied to outbound communications traffic.DISA Juniper SRX Services Gateway IDPS v1r2Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUSX-IP-000007 - The Juniper Networks SRX Series Gateway IDPS must block outbound traffic containing known and unknown DoS attacks by ensuring that anomaly-based attack objects are applied to outbound communications traffic.DISA Juniper SRX Services Gateway IDPS v1r2Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

Monterey - Limit Impact of Denial of Service AttacksNIST macOS Monterey v1.0.0 - All ProfilesUnix

SYSTEM AND COMMUNICATIONS PROTECTION

PHTN-67-000037 - The Photon operating system must use TCP syncookies.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SLES-15-010310 - The SUSE operating system must be configured to use TCP syncookies.DISA SLES 15 STIG v1r12Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-090280 - The operating system must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial of service attacks.DISA STIG Solaris 11 SPARC v2r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-20-010412 - The Ubuntu operating system must be configured to use TCP syncookies.DISA STIG Ubuntu 20.04 LTS v1r7Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-20-010412 - The Ubuntu operating system must be configured to use TCP syncookies.DISA STIG Ubuntu 20.04 LTS v1r10Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCSA-70-000110 - The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I/O Control (NIOC).DISA STIG VMware vSphere 7.0 vCenter v1r2VMware

SYSTEM AND COMMUNICATIONS PROTECTION

VCWN-06-000007 - The system must limit the effects of information-flooding types of Denial of Service (DoS) attacks.DISA STIG VMware vSphere vCenter 6.x v1r4VMware

SYSTEM AND COMMUNICATIONS PROTECTION

WDNS-SC-000027 - The Windows 2012 DNS Server must use DNS Notify to prevent denial of service through increase in workload.DISA Microsoft Windows 2012 Server DNS STIG v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION