Item Search

NameAudit NamePluginCategory
1.1 Set 'Maximum send size - connector level' to '10240'CIS Microsoft Exchange Server 2013 Edge v1.1.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

1.1 Set 'Maximum send size - connector level' to '10240'CIS Microsoft Exchange Server 2016 Edge v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

1.17 Set 'Maximum send size - organization level' to '10240'CIS Microsoft Exchange Server 2016 Hub v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

1.17 Set 'Maximum send size - organization level' to '10240'CIS Microsoft Exchange Server 2013 Hub v1.1.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

AMLS-L3-000230 - The Arista Multilayer Switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding.DISA STIG Arista MLS DCS-7000 Series RTR v1r3Arista

SYSTEM AND COMMUNICATIONS PROTECTION

BIND-9X-001080 - A BIND 9.x implementation configured as a caching name server must restrict recursive queries to only the IP addresses and IP address ranges of known supported clients - allow-recursionDISA BIND 9.x STIG v2r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000310 - The Cisco perimeter switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).DISA STIG Cisco NX-OS Switch RTR v2r1Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000310 - The Cisco perimeter switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).DISA STIG Cisco IOS XE Switch RTR v2r1Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000720 - The Cisco PE router must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.DISA STIG Cisco IOS-XR Router RTR v2r1Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000720 - The Cisco PE router must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.DISA STIG Cisco IOS XE Router RTR v2r4Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000720 - The Cisco PE switch must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.DISA STIG Cisco NX-OS Switch RTR v2r1Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

CISC-RT-000720 - The Cisco PE switch must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.DISA STIG Cisco IOS XE Switch RTR v2r1Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000160 - Exchange Mail Quota settings must not restrict receiving mail.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX13-MB-000165 - The Exchange Mail Store storage quota must issue a warning.DISA Microsoft Exchange 2013 Mailbox Server STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EX16-MB-000320 - Exchange Mail Quota settings must not restrict receiving mail.DISA Microsoft Exchange 2016 Mailbox Server STIG v2r4Windows

SYSTEM AND COMMUNICATIONS PROTECTION

FNFG-FW-000070 - The FortiGate firewall must block outbound traffic containing denial-of-service (DoS) attacks to protect against the use of internal information systems to launch any DoS attacks against other networks or endpoints.DISA Fortigate Firewall STIG v1r1FortiGate

SYSTEM AND COMMUNICATIONS PROTECTION

IIST-SI-000225 - The IIS 10.0 website must be configured to limit the maxURL.DISA IIS 10.0 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IIST-SI-000226 - The IIS 10.0 website must be configured to limit the size of web requests.DISA IIS 10.0 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IIST-SI-000227 - The IIS 10.0 websites Maximum Query String limit must be configured.DISA IIS 10.0 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IIST-SI-000228 - Non-ASCII characters in URLs must be prohibited by any IIS 10.0 website.DISA IIS 10.0 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IIST-SI-000229 - Double encoded URL requests must be prohibited by any IIS 10.0 website.DISA IIS 10.0 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IIST-SI-000230 - Unlisted file extensions in URL requests must be filtered by any IIS 10.0 website.DISA IIS 10.0 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IISW-SI-000225 - The IIS 8.5 website must be configured to limit the maxURL.DISA IIS 8.5 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IISW-SI-000226 - The IIS 8.5 website must be configured to limit the size of web requests.DISA IIS 8.5 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IISW-SI-000227 - The IIS 8.5 websites Maximum Query String limit must be configured.DISA IIS 8.5 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IISW-SI-000228 - Non-ASCII characters in URLs must be prohibited by any IIS 8.5 website.DISA IIS 8.5 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IISW-SI-000229 - Double encoded URL requests must be prohibited by any IIS 8.5 website.DISA IIS 8.5 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

IISW-SI-000230 - Unlisted file extensions in URL requests must be filtered by any IIS 8.5 website.DISA IIS 8.5 Site v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000310 - The Juniper perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).DISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

JUNI-RT-000700 - The Juniper PE router must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.DISA STIG Juniper Router RTR v2r4Juniper

SYSTEM AND COMMUNICATIONS PROTECTION

OH12-1X-000284 - OHS must have the KeepAlive directive properly set to restrict the ability of users to launch Denial of Service (DoS) attacks against other information systems or networks.DISA STIG Oracle HTTP Server 12.1.3 v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OH12-1X-000286 - OHS must have the MaxKeepAliveRequests directive properly set to restrict the ability of users to launch Denial of Service (DoS) attacks against other information systems or networks.DISA STIG Oracle HTTP Server 12.1.3 v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OH12-1X-000290 - OHS must have the LimitRequestFieldSize directive set to restrict the ability of users to launch Denial of Service (DoS) attacks against other information systems or networks.DISA STIG Oracle HTTP Server 12.1.3 v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

PANW-AG-000047 - The Palo Alto Networks security platform must protect against the use of internal systems from launching Denial of Service (DoS) attacks against other networks or endpoints.DISA STIG Palo Alto ALG v2r2Palo_Alto

SYSTEM AND COMMUNICATIONS PROTECTION

PANW-AG-000049 - The Palo Alto Networks security platform must block phone home traffic.DISA STIG Palo Alto ALG v2r2Palo_Alto

SYSTEM AND COMMUNICATIONS PROTECTION

PANW-AG-000050 - The Palo Alto Networks security platform must deny outbound IP packets that contain an illegitimate address in the source address field.DISA STIG Palo Alto ALG v2r2Palo_Alto

SYSTEM AND COMMUNICATIONS PROTECTION

SYMP-AG-000540 - Symantec ProxySG must block outbound traffic containing known and unknown denial-of-service (DoS) attacks to protect against the use of internal information systems to launch any DoS attacks against other networks or endpoints.DISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

SYSTEM AND COMMUNICATIONS PROTECTION

uRPF: Unicast Reverse Path Forwarding (uRPF) is EnabledTNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice AuditAlcatel

SYSTEM AND COMMUNICATIONS PROTECTION

VCEM-67-000019 - ESX Agent Manager must limit the number of allowed connections.DISA STIG VMware vSphere 6.7 EAM Tomcat v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCFL-67-000020 - vSphere Client must limit the number of allowed connections.DISA STIG VMware vSphere 6.7 Virgo Client v1r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCLD-67-000027 - VAMI must protect against or limit the effects of HTTP types of denial-of-service (DoS) attacks.DISA STIG VMware vSphere 6.7 VAMI-lighttpd v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCPF-67-000018 - Performance Charts must limit the number of allowed connections.DISA STIG VMware vSphere 6.7 Perfcharts Tomcat v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCST-67-000019 - The Security Token Service must limit the number of allowed connections.DISA STIG VMware vSphere 6.7 STS Tomcat v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

VCUI-67-000018 - vSphere UI must limit the number of allowed connections.DISA STIG VMware vSphere 6.7 UI Tomcat v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

WDNS-SC-000026 - The Windows 2012 DNS Server must restrict individuals from using it for launching Denial of Service (DoS) attacks against other information systems - SeDenyInteractiveLogonRightDISA Microsoft Windows 2012 Server DNS STIG v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WDNS-SC-000026 - The Windows 2012 DNS Server must restrict individuals from using it for launching Denial of Service (DoS) attacks against other information systems - SeDenyNetworkLogonRightDISA Microsoft Windows 2012 Server DNS STIG v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WDNS-SC-000026 - The Windows 2012 DNS Server must restrict individuals from using it for launching Denial of Service (DoS) attacks against other information systems - SeRemoteInteractiveLogonRightDISA Microsoft Windows 2012 Server DNS STIG v2r5Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WNFWA-000005 - The Windows Firewall with Advanced Security must allow outbound connections, unless a rule explicitly blocks the connection when connected to a domain.DISA Microsoft Windows Firewall v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WNFWA-000013 - The Windows Firewall with Advanced Security must allow outbound connections, unless a rule explicitly blocks the connection when connected to a private network.DISA Microsoft Windows Firewall v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WNFWA-000021 - The Windows Firewall with Advanced Security must allow outbound connections, unless a rule explicitly blocks the connection when connected to a public network.DISA Microsoft Windows Firewall v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION