Item Search

NameAudit NamePluginCategory
DTAVSEL-002 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to receive automatic updates.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

SYSTEM AND INFORMATION INTEGRITY

DTAVSEL-205 - A notification mechanism or process must be in place to notify Administrators of out of date DAT, detected malware and error codes - jokesAlertMcAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6Unix

SYSTEM AND INFORMATION INTEGRITY

DTAVSEL-205 - A notification mechanism or process must be in place to notify Administrators of out of date DAT, detected malware and error codes - SMTP senderMcAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6Unix

SYSTEM AND INFORMATION INTEGRITY

DTBI460 - Loose XAML files must be disallowed (Restricted Sites zone).DISA STIG Microsoft Internet Explorer 9 v1r15Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTBI475 - First-Run Opt-In ability must be disallowed (Internet zone).DISA STIG Microsoft Internet Explorer 9 v1r15Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO104 - Access - Disabling of user name and password syntax from being used in URLs must be enforced.DISA STIG Office 2010 Access v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO104 - Excel - Disabling of user name and password syntax from being used in URLs must be enforced.DISA STIG Office 2010 Excel v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO123 - Access - Navigation to URL's embedded in Office products must be blocked.DISA STIG Office 2010 Access v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO126 - Add-on Management functionality must be allowed.DISA STIG Microsoft Groove 2013 v1r3Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO126 - Excel - Add-on Management functionality must be allowed.DISA STIG Office 2010 Excel v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO127 - InfoPath - Application add-ins must be signed by Trusted Publisher.DISA STIG Office 2010 InfoPath v1r12Windows

CONFIGURATION MANAGEMENT

DTOO128 - Excel - Data Execution Prevention must be enforced.DISA STIG Office 2010 Excel v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO133 - Excel - All automatic loading from Trusted Locations must be disabled.DISA STIG Office 2010 Excel v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO145 - Excel - Macro storage must be in Personal macro workbooks.DISA STIG Office 2010 Excel v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO150 - Excel - Update of automatic links must be configured to prompt.DISA STIG Office 2010 Excel v1r11Windows

SYSTEM AND INFORMATION INTEGRITY

DTOO167 - InfoPath - Opening behavior for EMail forms containing code or scripts must be controlled.DISA STIG Office 2010 InfoPath v1r12Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO170 - InfoPath - InfoPath 2003 forms as email forms in InfoPath 2010 must be disallowed.DISA STIG Office 2010 InfoPath v1r12Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO173 - InfoPath - Disabling of email forms from the Full Trust Security Zone must be configured.DISA STIG Office 2010 InfoPath v1r12Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO211 - Access - ActiveX Installs must be configured for proper restriction.DISA STIG Office 2010 Access v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO211 - ActiveX installs must be configured for proper restrictions.DISA STIG Microsoft Groove 2013 v1r3Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO288 - Excel - Files in unsafe locations must be opened in Protected View.DISA STIG Office 2010 Excel v1r11Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO294 - InfoPath - InfoPath must be enforced to not use e-mail forms from the Intranet security zone.DISA STIG Office 2010 InfoPath v1r12Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO295 - InfoPath - InfoPath e-mail forms in Outlook must be disallowed.DISA STIG Office 2010 InfoPath v1r12Windows

SYSTEM AND COMMUNICATIONS PROTECTION

GEN000242 - The system must use at least two time sources for clock synchronization - 'NTP daemon is running'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PASSWORD_Check exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PROC_Privilege exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_Change exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_Reboot exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_Remove exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_SetEnv exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events ACCT_Disable exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events DEV_Configure exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events DEV_Create exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events FILE_Fchpriv exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events FILE_Owner exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events USER_Remove exists'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN003810 - The portmap or rpcbind service must not be running unless needed.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003830 - The rlogind service must not be running.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005260 - X Window System connections not required must be disabled.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005306 - SNMP service must require a FIPS 140-2 approved hash algorithm as part of its authentication and integrity methodsDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006040 - The system must not have any peer-to-peer file-sharing application installed.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006060 - The system must not run Samba unless needed.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN008520 - The system must employ a local firewall.DISA STIG AIX 5.3 v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN009120 - System must be configured to require the use of CAC, PIV compliant hardware token, or Alternate Logon Token for authenticationDISA STIG AIX 5.3 v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN009200 - The system must not have the daytime service active.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN009210 - The system must not have the discard service active.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN009220 - The system must not have the dtspc service active.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN009290 - The system must not have the systat service active.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN009300 - The inetd time service must not be active on the system on the inetd daemon.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

WG410 IIS6 - Interactive scripts must have proper access controls. - 'AspScriptTimeout set to 90 or less'DISA STIG IIS 6.0 Site Checklist v6r16Windows

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION