Audits
Settings
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Theme
Light
Dark
Auto
Help
Plugins
Overview
Plugins Pipeline
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
Tenable OT Security Families
Tenable Cloud Security Families
Tenable Self-Hosted Container Security Families
About Plugin Families
Release Notes
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
Release Notes
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Settings
Theme
Light
Dark
Auto
Detections
Plugins
Overview
Plugins Pipeline
Release Notes
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
Tenable OT Security Families
Tenable Cloud Security Families
Tenable Self-Hosted Container Security Families
About Plugin Families
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
Release Notes
Analytics
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Audits
References
CCI
CCI-001094
CCI
CCI|CCI-001094
Title
Restrict the ability of individuals to launch organization-defined denial of service attacks against other systems.
Reference Item Details
Reference:
CCI - DISA Control Correlation Identifier
Category:
2024
Audit Items
View all Reference Audit Items
Name
Plugin
Audit Name
1.12 VCLD-80-000060
Unix
CIS VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v1.0.0 CAT II
1.20 EX19-ED-000109
Windows
CIS Microsoft Exchange 2019 Edge Server STIG v1.0.0 CAT II
1.22 CISC-RT-000310
Cisco
CIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT I
1.24 CISC-RT-000310
Cisco
CIS Cisco IOS XR Router RTR STIG v1.0.0 CAT I
1.25 CISC-RT-000310
Cisco
CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT I
1.30 EX19-MB-000121
Windows
CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT III
1.31 EX19-MB-000122
Windows
CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT III
1.32 EX19-MB-000123
Windows
CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT III
1.52 CISC-RT-000720
Cisco
CIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.65 CISC-RT-000720
Cisco
CIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.73 CISC-RT-000720
Cisco
CIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.73 CISC-RT-000720
Cisco
CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
AMLS-L3-000230 - The Arista Multilayer Switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding.
Arista
DISA STIG Arista MLS DCS-7000 Series RTR v1r4
ARST-RT-000450 - The Arista perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Arista
DISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000450 - The Arista perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Arista
DISA Arista MLS EOS 4.X Router STIG v2r2
AS24-U1-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Unix
DISA STIG Apache Server 2.4 Unix Server v3r2
AS24-U1-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Unix
DISA STIG Apache Server 2.4 Unix Server v3r2 Middleware
AS24-U2-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Unix
DISA STIG Apache Server 2.4 Unix Site v2r6 Middleware
AS24-U2-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Unix
DISA STIG Apache Server 2.4 Unix Site v2r6
AS24-W1-000590 - The Apache web server must restrict the ability of users to launch denial-of-service (DoS) attacks against other information systems or networks.
Windows
DISA STIG Apache Server 2.4 Windows Server v2r3
AS24-W1-000590 - The Apache web server must restrict the ability of users to launch denial-of-service (DoS) attacks against other information systems or networks.
Windows
DISA STIG Apache Server 2.4 Windows Server v3r4
BIND-9X-001380 - A BIND 9.x server implementation must prohibit recursion on authoritative name servers.
Unix
DISA BIND 9.x STIG v3r2
BIND-9X-001740 - A BIND 9.x implementation configured as a caching name server must restrict recursive queries to only the IP addresses and IP address ranges of known supported clients.
Unix
DISA BIND 9.x STIG v3r2
CISC-RT-000310 - The Cisco perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA Cisco IOS XR Router RTR STIG v3r3
CISC-RT-000310 - The Cisco perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA Cisco IOS Router RTR STIG v3r4
CISC-RT-000310 - The Cisco perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA Cisco IOS XE Router RTR STIG v3r5
CISC-RT-000310 - The Cisco perimeter switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA Cisco IOS Switch RTR STIG v3r3
CISC-RT-000310 - The Cisco perimeter switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA Cisco IOS XE Switch RTR STIG v3r4
CISC-RT-000310 - The Cisco perimeter switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA Cisco NX OS Switch RTR STIG v3r4
CISC-RT-000720 - The Cisco PE router must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Cisco
DISA Cisco IOS XR Router RTR STIG v3r3
CISC-RT-000720 - The Cisco PE router must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Cisco
DISA Cisco IOS XE Router RTR STIG v3r5
CISC-RT-000720 - The Cisco PE switch must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Cisco
DISA Cisco IOS XE Switch RTR STIG v3r4
CISC-RT-000720 - The Cisco PE switch must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Cisco
DISA Cisco NX OS Switch RTR STIG v3r4
DKER-EE-001170 - A policy set using the built-in role-based access control (RBAC) capabilities in the Universal Control Plane (UCP) component of Docker Enterprise must be configured.
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - repositoryAccess
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r2
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - team member access
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
EX13-MB-000155 - Exchange Mail quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3
EX13-MB-000160 - Exchange Mail Quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3
EX13-MB-000165 - The Exchange Mail Store storage quota must issue a warning.
Windows
DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3
EX13-MB-000170 - Exchange Mailbox Stores must mount at startup.
Windows
DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3
EX16-MB-000310 - Exchange Mail quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6
EX16-MB-000320 - Exchange Mail Quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6
EX16-MB-000340 - Exchange Mailbox Stores must mount at startup.
Windows
DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6
EX19-ED-000109 - More than one Edge server must be deployed.
Windows
DISA Microsoft Exchange 2019 Edge Server STIG v2r2
EX19-MB-000121 - Exchange mailbox stores must mount at startup.
Windows
DISA Microsoft Exchange 2019 Mailbox Server STIG v2r3
EX19-MB-000122 - Exchange mail quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2019 Mailbox Server STIG v2r3
EX19-MB-000123 - Exchange mail quota settings must not restrict sending mail.
Windows
DISA Microsoft Exchange 2019 Mailbox Server STIG v2r3
F5BI-AP-300059 - The F5 BIG-IP appliance providing content filtering must employ rate-based attack prevention behavior analysis.
F5
DISA F5 BIG-IP TMOS ALG STIG v1r2
F5BI-DN-300039 - The F5 BIG-IP DNS server implementation must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks.
F5
DISA F5 BIG-IP TMOS DNS STIG v1r1
F5BI-FW-300017 - The F5 BIG-IP appliance must employ filters that prevent or limit the effects of all types of commonly known denial-of-service (DoS) attacks, including flooding, packet sweeps, and unauthorized port scanning.
F5
DISA F5 BIG-IP TMOS Firewall STIG v1r1
