DISA_STIG_McAfee_VirusScan_8.8_Managed_Client_v5r20.audit from DISA McAfee VirusScan 8.8 Managed Client STIG v5r20 STIG

DTAG008 - The antivirus signature file age must not exceed 7 days.

800-53|SI-3

CAT|I

CCI|CCI-001240

Rule-ID|SV-55133r2_rule

STIG-ID|DTAG008

Vuln-ID|V-19910

DTAM001 - McAfee VirusScan On-Access General Policies must be configured to enable on-access scanning at system startup.

CCI|CCI-001242

Rule-ID|SV-55134r1_rule

STIG-ID|DTAM001

Vuln-ID|V-6453

DTAM002 - McAfee VirusScan On-Access General Policies must be configured to scan boot sectors.

CAT|II

Rule-ID|SV-55135r1_rule

STIG-ID|DTAM002

Vuln-ID|V-6467

DTAM003 - McAfee VirusScan On-Access General Policies must be configured to scan floppy during shutdown.

Rule-ID|SV-55139r1_rule

STIG-ID|DTAM003

Vuln-ID|V-6468

DTAM004 - McAfee VirusScan On-Access General Policies must be configured to notify local users when detections occur.

CCI|CCI-001662

Rule-ID|SV-55141r1_rule

STIG-ID|DTAM004

Vuln-ID|V-6469

DTAM005 - McAfee VirusScan On-Access General Policies must be configured to prevent users from removing messages from the list.

Rule-ID|SV-55144r1_rule

STIG-ID|DTAM005

Vuln-ID|V-6470

DTAM009 - McAfee VirusScan On-Access General Policies must be configured to log the scan sessions.

Rule-ID|SV-55145r1_rule

STIG-ID|DTAM009

Vuln-ID|V-6474

DTAM010 - McAfee VirusScan On-Access General Policies log file size must be restricted and be configured to at least 10MB. (bLimitSize)

Rule-ID|SV-55147r1_rule

STIG-ID|DTAM010

Vuln-ID|V-6475

DTAM010 - McAfee VirusScan On-Access General Policies log file size must be restricted and be configured to at least 10MB. (dwMaxLogSizeMB)

DTAM012 - McAfee VirusScan On-Access General Policies must be configured to log the session summary.

Rule-ID|SV-55148r1_rule

STIG-ID|DTAM012

Vuln-ID|V-6478

DTAM013 - McAfee VirusScan On-Access General Policies must be configured to log any failure to scan encrypted files.

Rule-ID|SV-55149r1_rule

STIG-ID|DTAM013

Vuln-ID|V-6583

DTAM016 - McAfee VirusScan must be configured to receive DAT and Engine updates. (schedule is daily)

CCI|CCI-001247

Rule-ID|SV-55151r4_rule

STIG-ID|DTAM016

Vuln-ID|V-6585

DTAM016 - McAfee VirusScan must be configured to receive DAT and Engine updates. (scheduling enabled)

DTAM021 - McAfee VirusScan On-Delivery Email Scan Policies must be configured to enable on-delivery email scanning.

CCI|CCI-001170

Rule-ID|SV-55153r2_rule

STIG-ID|DTAM021

Vuln-ID|V-6586

DTAM022 - McAfee VirusScan On-Delivery Email Scan Policies must be configured to find unknown program threats and Trojans.

Rule-ID|SV-55169r2_rule

STIG-ID|DTAM022

Vuln-ID|V-6587

DTAM023 - McAfee VirusScan On Delivery Email Scan Policies must be configured to find unknown macro threats.

Rule-ID|SV-55171r2_rule

STIG-ID|DTAM023

Vuln-ID|V-6588

DTAM027 - McAfee VirusScan On Delivery Email Scan Policies must be configured to decode MIME encoded files.

Rule-ID|SV-55174r2_rule

STIG-ID|DTAM027

Vuln-ID|V-6590

DTAM028 - McAfee VirusScan On Delivery Email Scan Policies must be configured to scan email message body.

Rule-ID|SV-55177r2_rule

STIG-ID|DTAM028

Vuln-ID|V-6591

DTAM029 - McAfee VirusScan On Delivery Email Scan Policies, when a threat is found, must be configured to clean attachments as the first action.

CCI|CCI-001243

Rule-ID|SV-55178r2_rule

STIG-ID|DTAM029

Vuln-ID|V-6592

DTAM035 - McAfee VirusScan On-Delivery Email Scan Policies must be configured to record scanning activity in a log file.

CCI|CCI-000130

Rule-ID|SV-55187r2_rule

STIG-ID|DTAM035

Vuln-ID|V-6596

DTAM036 - McAfee VirusScan On-Delivery Email Scan Policies log file size must be restricted and be configured to be at least 10MB. (bLimitSize)

CCI|CCI-000140

Rule-ID|SV-55188r2_rule

STIG-ID|DTAM036

Vuln-ID|V-6597

DTAM036 - McAfee VirusScan On-Delivery Email Scan Policies log file size must be restricted and be configured to be at least 10MB. (dwMaxLogSizeMB)

DTAM039 - McAfee VirusScan On Delivery Email Scan Policies must be configured to clean attachments as the first action for when an unwanted program is found.

Rule-ID|SV-55189r2_rule

STIG-ID|DTAM039

Vuln-ID|V-14652

DTAM045 - McAfee VirusScan On-Demand scan must be configured to scan all fixed or local disks. x64

CCI|CCI-001241

Rule-ID|SV-55191r4_rule

STIG-ID|DTAM045

Vuln-ID|V-6599

DTAM045 - McAfee VirusScan On-Demand scan must be configured to scan all fixed or local disks. x86

DTAM045 - McAfee VirusScan On-Demand scan must be configured to scan all running processes. x64

DTAM045 - McAfee VirusScan On-Demand scan must be configured to scan all running processes. x86

DTAM046 - McAfee VirusScan On-Demand scan must be configured to scan all subfolders. x64

Rule-ID|SV-55192r3_rule

STIG-ID|DTAM046

Vuln-ID|V-6600

DTAM046 - McAfee VirusScan On-Demand scan must be configured to scan all subfolders. x86

DTAM047 - McAfee VirusScan On-Demand scan must be configured to scan boot sectors. x64

Rule-ID|SV-55193r3_rule

STIG-ID|DTAM047

Vuln-ID|V-6601

DTAM047 - McAfee VirusScan On-Demand scan must be configured to scan boot sectors. x86

DTAM048 - McAfee VirusScan On-Demand scan must be configured to scan all files. x64

Rule-ID|SV-55194r3_rule

STIG-ID|DTAM048

Vuln-ID|V-6602

DTAM048 - McAfee VirusScan On-Demand scan must be configured to scan all files. x86

DTAM050 - McAfee VirusScan On-Demand scan must be configured so there are no exclusions from the scan unless exclusions have been documented with, and approved by, the ISSO/ISSM/DAA. x64

Rule-ID|SV-55195r4_rule

STIG-ID|DTAM050

Vuln-ID|V-6604

DTAM050 - McAfee VirusScan On-Demand scan must be configured so there are no exclusions from the scan unless exclusions have been documented with, and approved by, the ISSO/ISSM/DAA. x86

DTAM052 - McAfee VirusScan On-Demand scan must be configured to scan inside archives.

Rule-ID|SV-55196r4_rule

STIG-ID|DTAM052

Vuln-ID|V-6611

DTAM053 - McAfee VirusScan On-Demand scan must be configured to decode MIME encoded files. x64

Rule-ID|SV-55197r3_rule

STIG-ID|DTAM053

Vuln-ID|V-6612

DTAM053 - McAfee VirusScan On-Demand scan must be configured to decode MIME encoded files. x86

DTAM054 - McAfee VirusScan On-Demand scan must be configured to find unknown program threats. x64

Rule-ID|SV-55199r3_rule

STIG-ID|DTAM054

Vuln-ID|V-6614

DTAM054 - McAfee VirusScan On-Demand scan must be configured to find unknown program threats. x86

DTAM055 - McAfee VirusScan On-Demand scan must be configured to find unknown macro threats. x64

Rule-ID|SV-55201r3_rule

STIG-ID|DTAM055

Vuln-ID|V-6615

DTAM055 - McAfee VirusScan On-Demand scan must be configured to find unknown macro threats. x86

DTAM056 - McAfee VirusScan On-Demand scan actions, When a threat is found must be configured to clean files automatically as first action. x64

Rule-ID|SV-55203r3_rule

STIG-ID|DTAM056

Vuln-ID|V-6616

DTAM056 - McAfee VirusScan On-Demand scan actions, When a threat is found must be configured to clean files automatically as first action. x86

DTAM057 - McAfee VirusScan On-Demand scan actions must be configured to delete files automatically if first action fails. x64

Rule-ID|SV-55204r3_rule

STIG-ID|DTAM057

Vuln-ID|V-6617

DTAM057 - McAfee VirusScan On-Demand scan actions must be configured to delete files automatically if first action fails. x86

DTAM058 - McAfee VirusScan On-Demand scan must be configured to detect for unwanted programs. x64

Rule-ID|SV-55207r3_rule

STIG-ID|DTAM058

Vuln-ID|V-14654

DTAM058 - McAfee VirusScan On-Demand scan must be configured to detect for unwanted programs. x86

DTAM059 - McAfee VirusScan On-Demand scan must be configured to record scanning activity in a log file. x64

Rule-ID|SV-55209r3_rule

STIG-ID|DTAM059

Vuln-ID|V-6618

DTAM059 - McAfee VirusScan On-Demand scan must be configured to record scanning activity in a log file. x86

DTAM060 - McAfee VirusScan On-Demand scan log file size must be configured to at least 10MB.

Rule-ID|SV-55211r3_rule

STIG-ID|DTAM060

Vuln-ID|V-6620

DTAM060 - McAfee VirusScan On-Demand scan log file size must be restricted.

DTAM063 - McAfee VirusScan On-Demand scan must be configured to log any failure to scan encrypted files. x64

Rule-ID|SV-55212r3_rule

STIG-ID|DTAM063

Vuln-ID|V-6625

DTAM063 - McAfee VirusScan On-Demand scan must be configured to log any failure to scan encrypted files. x86

DTAM070 - McAfee VirusScan On-Demand scan must be scheduled to be executed at least on a weekly basis. x64

Rule-ID|SV-55213r3_rule

STIG-ID|DTAM070

Vuln-ID|V-6627

DTAM070 - McAfee VirusScan On-Demand scan must be scheduled to be executed at least on a weekly basis. x86

DTAM090 - McAfee VirusScan On-Access General Policies must be configured to enable scanning of scripts.

Rule-ID|SV-55214r1_rule

STIG-ID|DTAM090

Vuln-ID|V-14618

DTAM091 - McAfee VirusScan On-Access General Policies must be configured to block the connection when a threatened file is detected in a shared folder.

Rule-ID|SV-55217r1_rule

STIG-ID|DTAM091

Vuln-ID|V-14619

DTAM092 - McAfee VirusScan On-Access General Policies must be configured to unblock connections after a minimum of 30 minutes.

Rule-ID|SV-55219r1_rule

STIG-ID|DTAM092

Vuln-ID|V-14620

DTAM093 - McAfee VirusScan On-Access General Policies must be configured to block the connection when a file with a potentially unwanted program is detected in a shared folder.

Rule-ID|SV-55221r1_rule

STIG-ID|DTAM093

Vuln-ID|V-14621

DTAM100 - McAfee VirusScan On-Access Default Processes Policies must be configured to use only one scanning policy for all processes, unless the use of Low-Risk Processes/High-Risk Processes has been documented with, and approved by, the IAO/IAM.

Rule-ID|SV-55222r1_rule

STIG-ID|DTAM100

Vuln-ID|V-14622

DTAM101 - McAfee VirusScan On-Access Default Processes Policies must be configured to scan when writing to disk.

Detections

Analytics

DISA McAfee VirusScan 8.8 Managed Client STIG v5r20

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Functional Update

Miscellaneous