Detections
Analytics

CCI|CCI-001095

Title

Manage capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial of service attacks.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.54 UBTU-22-253010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.110 UBTU-24-600190UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.182 RHEL-09-253010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
3.123 - Auditing Access of Global System Objects must be turned off.WindowsDISA Windows Vista STIG v6r41
3.124 - Audit of Backup and Restore Privileges is not turned off.WindowsDISA Windows Vista STIG v6r41
AIX7-00-003096 - AIX must set Stack Execution Disable (SED) system wide mode to all.UnixDISA STIG AIX 7.x v3r1
ALMA-09-042480 - AlmaLinux OS 9 must be configured to use TCP syncookies.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r2
AMLS-L3-000270 - The Arista Multilayer Switch must manage excess bandwidth to limit the effects of packet flooding types of denial of service (DoS) attacks - DoS attacks.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
ARST-L2-000030 - The Arista MLS layer 2 switch must be configured for Storm Control to limit the effects of packet flooding types of denial-of-service (DoS) attacks.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
ARST-L2-000030 - The Arista MLS layer 2 switch must be configured for Storm Control to limit the effects of packet flooding types of denial-of-service (DoS) attacks.AristaDISA STIG Arista MLS EOS 4.x L2S v2r2
ARST-RT-000290 - The MPLS router with RSVP-TE enabled must be configured with message pacing or refresh reduction to adjust maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core routers.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000290 - The MPLS router with RSVP-TE enabled must be configured with message pacing or refresh reduction to adjust maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core routers.AristaDISA STIG Arista MLS EOS 4.x Router v2r2
ARST-RT-000300 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.AristaDISA STIG Arista MLS EOS 4.x Router v2r2
ARST-RT-000300 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000310 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS DODIN Technical Profile.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000310 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS DODIN Technical Profile.AristaDISA STIG Arista MLS EOS 4.x Router v2r2
ARST-RT-000320 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS GIG Technical Profile.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000320 - The PE router must be configured to enforce a Quality-of-Service (QoS) policy in accordance with the QoS GIG Technical Profile.AristaDISA STIG Arista MLS EOS 4.x Router v2r2
Big Sur - Limit Impact of Denial of Service AttacksUnixNIST macOS Big Sur v1.4.0 - All Profiles
BIND-9X-001054 - A BIND 9.x server implementation must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of Denial of Service (DoS) attacks.UnixDISA BIND 9.x STIG v2r3
CASA-FW-000150 - The Cisco ASA must be configured to enable threat detection to mitigate risks of denial-of-service (DoS) attacks.CiscoDISA STIG Cisco ASA FW v2r1
CISC-L2-000040 - The Cisco switch must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks.CiscoDISA Cisco IOS XE Switch L2S STIG v3r2
CISC-L2-000040 - The Cisco switch must manage excess bandwidth to limit the effects of packet-flooding types of denial-of-service (DoS) attacks.CiscoDISA Cisco IOS Switch L2S STIG v3r1
CISC-RT-000610 - The MPLS router with RSVP-TE enabled must be configured with message pacing to adjust maximum burst and maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core routers.CiscoDISA Cisco IOS XE Router RTR STIG v3r3
CISC-RT-000610 - The MPLS router with RSVP-TE enabled must be configured with message pacing to adjust maximum burst and maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core routers.CiscoDISA Cisco IOS Router RTR STIG v3r3
CISC-RT-000610 - The MPLS router with RSVP-TE enabled must be configured with message pacing to adjust maximum burst and maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core routers.CiscoDISA Cisco IOS XR Router RTR STIG v3r2
CISC-RT-000610 - The MPLS switch with RSVP-TE enabled must be configured with message pacing to adjust maximum burst and maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core switches.CiscoDISA Cisco IOS XE Switch RTR STIG v3r2
CISC-RT-000610 - The MPLS switch with RSVP-TE enabled must be configured with message pacing to adjust maximum burst and maximum number of RSVP messages to an output queue based on the link speed and input queue size of adjacent core switches.CiscoDISA Cisco NX OS Switch RTR STIG v3r3
CISC-RT-000700 - The Cisco PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.CiscoDISA Cisco IOS XR Router RTR STIG v3r2
CISC-RT-000700 - The Cisco PE router providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.CiscoDISA Cisco IOS XE Router RTR STIG v3r3
CISC-RT-000700 - The Cisco PE switch providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.CiscoDISA Cisco NX OS Switch RTR STIG v3r3
CISC-RT-000700 - The Cisco PE switch providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.CiscoDISA Cisco IOS XE Switch RTR STIG v3r2
CISC-RT-000760 - The Cisco PE router must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS Router RTR STIG v3r3
CISC-RT-000760 - The Cisco PE router must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS XE Router RTR STIG v3r3
CISC-RT-000760 - The Cisco PE router must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS XR Router RTR STIG v3r2
CISC-RT-000760 - The Cisco PE switch must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS XE Switch RTR STIG v3r2
CISC-RT-000760 - The Cisco PE switch must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco NX OS Switch RTR STIG v3r3
CISC-RT-000760 - The Cisco PE switch must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS Switch RTR STIG v3r1
CISC-RT-000770 - The Cisco P router must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS XE Router RTR STIG v3r3
CISC-RT-000770 - The Cisco P router must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS XR Router RTR STIG v3r2
CISC-RT-000770 - The Cisco P router must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS Router RTR STIG v3r3
CISC-RT-000770 - The Cisco P switch must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco NX OS Switch RTR STIG v3r3
CISC-RT-000770 - The Cisco P switch must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS Switch RTR STIG v3r1
CISC-RT-000770 - The Cisco P switch must be configured to enforce a Quality-of-Service (QoS) policy to provide preferred treatment for mission-critical applications.CiscoDISA Cisco IOS XE Switch RTR STIG v3r2
CISC-RT-000780 - The Cisco PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial of service (DoS) attacks.CiscoDISA Cisco IOS XE Router RTR STIG v3r3
CISC-RT-000780 - The Cisco PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.CiscoDISA Cisco IOS Router RTR STIG v3r3
CISC-RT-000780 - The Cisco PE router must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.CiscoDISA Cisco IOS XR Router RTR STIG v3r2
CISC-RT-000780 - The Cisco switch must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.CiscoDISA Cisco NX OS Switch RTR STIG v3r3
CISC-RT-000780 - The Cisco switch must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.CiscoDISA Cisco IOS XE Switch RTR STIG v3r2
CISC-RT-000780 - The Cisco switch must be configured to enforce a Quality-of-Service (QoS) policy to limit the effects of packet flooding denial-of-service (DoS) attacks.CiscoDISA Cisco IOS Switch RTR STIG v3r1