DISA_STIG_McAfee_VSEL_1.9.x_2.0.x_Managed_Client_v1r5.audit from DISA McAfee VSEL 1.9/2.0 Managed Client v1r5 STIG

DTAVSEL-001 - The anti-virus signature file age must not exceed 7 days - avvclean.dat

800-53|SI-3b.

CAT|I

CCI|CCI-001240

Rule-ID|SV-77283r1_rule

STIG-ID|DTAVSEL-001

Vuln-ID|V-62793

DTAVSEL-001 - The anti-virus signature file age must not exceed 7 days - avvnames.dat

DTAVSEL-001 - The anti-virus signature file age must not exceed 7 days - avvscan.dat

DTAVSEL-002 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to receive automatic updates.

CAT|II

Rule-ID|SV-77487r1_rule

STIG-ID|DTAVSEL-002

Vuln-ID|V-62997

DTAVSEL-003 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to enable On-Access scanning.

800-53|SI-3c.2.

CCI|CCI-001243

Rule-ID|SV-77489r1_rule

STIG-ID|DTAVSEL-003

Vuln-ID|V-62999

DTAVSEL-004 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to decompress archives when scanning.

Rule-ID|SV-77491r1_rule

STIG-ID|DTAVSEL-004

Vuln-ID|V-63001

DTAVSEL-005 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown program viruses.

Rule-ID|SV-77493r1_rule

STIG-ID|DTAVSEL-005

Vuln-ID|V-63003

DTAVSEL-006 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown macro viruses.

Rule-ID|SV-77495r1_rule

STIG-ID|DTAVSEL-006

Vuln-ID|V-63005

DTAVSEL-007 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find potentially unwanted programs.

Rule-ID|SV-77497r1_rule

STIG-ID|DTAVSEL-007

Vuln-ID|V-63007

DTAVSEL-008 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being written to disk.

Rule-ID|SV-77499r1_rule

STIG-ID|DTAVSEL-008

Vuln-ID|V-63009

DTAVSEL-009 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being read from disk.

Rule-ID|SV-77501r1_rule

STIG-ID|DTAVSEL-009

Vuln-ID|V-63011

DTAVSEL-010 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan all file types.

Rule-ID|SV-77503r1_rule

STIG-ID|DTAVSEL-010

Vuln-ID|V-63013

DTAVSEL-011 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner maximum scan time must not be less than 45 seconds - default.scanMaxTmo

Rule-ID|SV-77505r1_rule

STIG-ID|DTAVSEL-011

Vuln-ID|V-63015

DTAVSEL-011 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner maximum scan time must not be less than 45 seconds - scanMaxTmo

DTAVSEL-012 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must only be configured with exclusions which are documented and approved by the ISSO/ISSM/AO.

Rule-ID|SV-77507r2_rule

STIG-ID|DTAVSEL-012

Vuln-ID|V-63017

DTAVSEL-013 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean infected files automatically as first action when a virus or Trojan is detected.

Rule-ID|SV-77509r1_rule

STIG-ID|DTAVSEL-013

Vuln-ID|V-63019

DTAVSEL-014 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Move infected files to the quarantine directory if first action fails when a virus or Trojan is detected.

Rule-ID|SV-77511r1_rule

STIG-ID|DTAVSEL-014

Vuln-ID|V-63021

DTAVSEL-015 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean infected files automatically as first action when programs and jokes are found.

Rule-ID|SV-77513r1_rule

STIG-ID|DTAVSEL-015

Vuln-ID|V-63023

DTAVSEL-016 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Move infected files to the quarantine directory if first action fails when programs and jokes are found.

Rule-ID|SV-77515r1_rule

STIG-ID|DTAVSEL-016

Vuln-ID|V-63025

DTAVSEL-017 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to deny access to the file if scanning fails.

Rule-ID|SV-77517r1_rule

STIG-ID|DTAVSEL-017

Vuln-ID|V-63027

DTAVSEL-018 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to allow access to files if scanning times out.

Rule-ID|SV-77519r1_rule

STIG-ID|DTAVSEL-018

Vuln-ID|V-63029

DTAVSEL-019 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed.

800-53|SI-3c.1.

CCI|CCI-001242

Rule-ID|SV-77521r1_rule

STIG-ID|DTAVSEL-019

Vuln-ID|V-63031

DTAVSEL-100 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to run a scheduled On-Demand scan at least once a week.

CCI|CCI-001241

Rule-ID|SV-77523r2_rule

STIG-ID|DTAVSEL-100

Vuln-ID|V-63033

DTAVSEL-101 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decompress archives when scanning.

Rule-ID|SV-77525r1_rule

STIG-ID|DTAVSEL-101

Vuln-ID|V-63035

DTAVSEL-102 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown program viruses.

Rule-ID|SV-77527r1_rule

STIG-ID|DTAVSEL-102

Vuln-ID|V-63037

DTAVSEL-103 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown macro viruses.

Rule-ID|SV-77529r1_rule

STIG-ID|DTAVSEL-103

Vuln-ID|V-63039

DTAVSEL-104 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find potentially unwanted programs.

Rule-ID|SV-77531r1_rule

STIG-ID|DTAVSEL-104

Vuln-ID|V-63041

DTAVSEL-105 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to scan all file types.

Rule-ID|SV-77533r1_rule

STIG-ID|DTAVSEL-105

Vuln-ID|V-63043

DTAVSEL-106 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean infected files automatically as first action when a virus or Trojan is detected.

Rule-ID|SV-77535r1_rule

STIG-ID|DTAVSEL-106

Vuln-ID|V-63045

DTAVSEL-107 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Move infected files to the quarantine directory if first action fails when a virus or Trojan is detected.

Rule-ID|SV-77537r1_rule

STIG-ID|DTAVSEL-107

Vuln-ID|V-63047

DTAVSEL-108 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must only be configured with exclusions which are documented and approved by the ISSO/ISSM/AO.

Rule-ID|SV-77539r2_rule

STIG-ID|DTAVSEL-108

Vuln-ID|V-63049

DTAVSEL-109 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x Web UI must be disabled.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-77541r1_rule

STIG-ID|DTAVSEL-109

Vuln-ID|V-63051

DTAVSEL-110 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean infected files automatically as first action when programs and jokes are found.

Rule-ID|SV-77543r1_rule

STIG-ID|DTAVSEL-110

Vuln-ID|V-63053

DTAVSEL-111 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Move infected files to the quarantine directory if first action fails when programs and jokes are found.

Rule-ID|SV-77545r1_rule

STIG-ID|DTAVSEL-111

Vuln-ID|V-63055

DTAVSEL-112 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decode MIME encoded files.

Rule-ID|SV-77547r1_rule

STIG-ID|DTAVSEL-112

Vuln-ID|V-63057

DTAVSEL-113 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to include all local drives and their sub-directories.

Rule-ID|SV-77549r2_rule

STIG-ID|DTAVSEL-113

Vuln-ID|V-63059

DTAVSEL-200 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must scan all media used for system maintenance prior to use.

800-53|MA-3(2)

CCI|CCI-000870

Rule-ID|SV-77553r1_rule

STIG-ID|DTAVSEL-200

Vuln-ID|V-63063

DTAVSEL-201 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to receive all patches, service packs and updates from a DoD-managed source.

800-53|CM-5(3)

CCI|CCI-001749

Rule-ID|SV-77555r1_rule

STIG-ID|DTAVSEL-201

Vuln-ID|V-63065

DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - group

800-53|AC-6(10)

CCI|CCI-002235

Rule-ID|SV-77557r1_rule

STIG-ID|DTAVSEL-202

Vuln-ID|V-63067

DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - user

DTAVSEL-205 - A notification mechanism or process must be in place to notify Administrators of out of date DAT, detected malware and error codes.

Detections

Analytics

McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5

Audit Details

File Details

Audit Changelog

Revision 1.8

Miscellaneous

Revision 1.7

Miscellaneous

Added

Revision 1.6

Miscellaneous

Revision 1.5

Functional Update

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Detections

Analytics

McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5 Download File

Audit Details

File Details

Audit Changelog

Miscellaneous

Miscellaneous

Added

Miscellaneous

Functional Update

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5