| Extreme : Configure Banner before-login | ACCESS CONTROL |
| Extreme : Configure idletimeout <= 15 | ACCESS CONTROL |
| Extreme : Configure max-failed-logins <= 3 | ACCESS CONTROL |
| Extreme : Configure Remote Syslog | AUDIT AND ACCOUNTABILITY |
| Extreme : Configure timezone = UTC | CONFIGURATION MANAGEMENT |
| Extreme : Device Info | CONFIGURATION MANAGEMENT |
| Extreme : Disable SNMP write access | ACCESS CONTROL |
| Extreme : Disable Telnet | CONFIGURATION MANAGEMENT |
| Extreme : Enable SNMP Traps | AUDIT AND ACCOUNTABILITY |
| Extreme : License Info | CONFIGURATION MANAGEMENT |
| Extreme : Only allow SNMPv3 | CONFIGURATION MANAGEMENT |
| Extreme : Password Policy - char-validation | IDENTIFICATION AND AUTHENTICATION |
| Extreme : Password Policy - history <=4 | IDENTIFICATION AND AUTHENTICATION |
| Extreme : Password Policy - lockout-on-login-failures | ACCESS CONTROL |
| Extreme : Password Policy - max-age <= 90 | IDENTIFICATION AND AUTHENTICATION |
| Extreme : Password Policy - min-length >= 8 | IDENTIFICATION AND AUTHENTICATION |
| Extreme : Review admin accounts | ACCESS CONTROL |
| Extreme : Review all accounts | ACCESS CONTROL |
| Extreme : SNMP community name != private | SYSTEM AND INFORMATION INTEGRITY |
| Extreme : SNMP community name != public | IDENTIFICATION AND AUTHENTICATION |
| Extreme : switch Info | CONFIGURATION MANAGEMENT |
