CSCv7|9.2

Title

Ensure Only Approved Ports, Protocols and Services Are Running

Description

Ensure that only network ports, protocols, and services listening on a system with validated business needs, are running on each system.

Reference Item Details

Category: Limitation and Control of Network Ports, Protocols, and Services

Audit Items

View all Reference Audit Items

NamePluginAudit Name
Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS Red Hat EL8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS AlmaLinux OS 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS AlmaLinux OS 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS Red Hat EL8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS Oracle Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS Oracle Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Red Hat EL8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Red Hat EL8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Rocky Linux 8 Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS AlmaLinux OS 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS AlmaLinux OS 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Rocky Linux 8 Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Oracle Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Oracle Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Red Hat EL8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS AlmaLinux OS 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Rocky Linux 8 Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Rocky Linux 8 Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Oracle Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS AlmaLinux OS 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Red Hat EL8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Oracle Linux 8 Server L1 v2.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - blacklistUnixCIS Oracle Linux 8 Server L2 v2.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - blacklistUnixCIS Ubuntu Linux 22.04 LTS Server L2 v.1.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - blacklistUnixCIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - blacklistUnixCIS Oracle Linux 8 Workstation L2 v2.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS AlmaLinux OS 8 Workstation L2 v2.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Workstation L2 v2.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS Rocky Linux 8 Workstation L2 v1.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS Rocky Linux 8 Server L2 v1.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS Red Hat EL8 Server L2 v2.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Server L2 v2.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS Red Hat EL8 Workstation L2 v2.0.0
1.1.1.2 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS AlmaLinux OS 8 Server L2 v2.0.0