CSCv7|1.7

Title

Deploy Port Level Access Control

Description

Utilize port level access control, following 802.1x standards, to control which devices can authenticate to the network. The authentication system shall be tied into the hardware asset inventory data to ensure only authorized devices can connect to the network.

Reference Item Details

Category: Inventory and Control of Hardware Assets

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.11 Host hardware must secure unused external hardware portsVMwareCIS VMware ESXi 8.0 v1.4.0 L2 VMware
1.11 Host hardware must secure unused external hardware portsVMwareCIS VMware ESXi 9.0 v1.0.0 L2 VMware
3.2 Disable the Shutdown portUnixCIS Apache Tomcat 9 L2 v1.2.0 Middleware
3.2 Disable the Shutdown portUnixCIS Apache Tomcat 11 v1.0.0 L2
3.2 Disable the Shutdown portUnixCIS Apache Tomcat 9 L2 v1.2.0
3.2 Disable the Shutdown portUnixCIS Apache Tomcat 10 L2 v1.1.0
3.2 Disable the Shutdown portUnixCIS Apache Tomcat 10.1 v1.1.0 L2
3.2 Disable the Shutdown portUnixCIS Apache Tomcat 10 L2 v1.1.0 Middleware
3.16 Host must configure a session timeout for the APIVMwareCIS VMware ESXi 8.0 v1.4.0 L1 VMware
3.16 Host must configure a session timeout for the APIVMwareCIS VMware ESXi 9.0 v1.0.0 L1 VMware
3.17 Host must automatically terminate idle host client sessionsVMwareCIS VMware ESXi 9.0 v1.0.0 L1 VMware
3.17 Host must automatically terminate idle host client sessionsVMwareCIS VMware ESXi 8.0 v1.4.0 L1 VMware
7.5 Virtual machines must be configured to lock when the last console connection is closedVMwareCIS VMware ESXi 9.0 v1.0.0 L1 VMware
7.5 Virtual machines must be configured to lock when the last console connection is closedVMwareCIS VMware ESXi 8.0 v1.4.0 L1 VMware
9.5 Ensure mutual TLS is enabledMySQLDBCIS MariaDB 10.11 v1.0.0 L1 MariaDB RDBMS MySQLDB
9.5 Ensure mutual TLS is enabledMySQLDBCIS MariaDB 10.6 Database L1 v1.1.0
10.5 Rename the manager applicationUnixCIS Apache Tomcat 11 v1.0.0 L2
10.5 Rename the manager applicationUnixCIS Apache Tomcat 10.1 v1.1.0 L2
11.2 Ensure Apache Processes Run in the httpd_t Confined ContextUnixCIS Apache HTTP Server 2.4 v2.3.0 L2