Item Search

NameAudit NamePluginCategory
1.1.1.4 Ensure mounting of hfs filesystems is disabledCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of udf filesystems is disabledCIS Ubuntu Linux 20.04 LTS Workstation L2 v2.0.1Unix

CONFIGURATION MANAGEMENT

1.1.1.9 Ensure unused filesystems kernel modules are not availableCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.2.2.1 Ensure /dev/shm is a separate partitionCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.3 (L1) Host hardware must enable Intel TXT, if availableCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT, MAINTENANCE

1.3.1.7 Ensure the MCS Translation Service (mcstrans) is not installedCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.4 (L1) Host hardware must enable and configure a TPM 2.0CIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT, MAINTENANCE

2.1.6 Ensure samba file server services are not in useCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.10 Ensure nis server services are not in useCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.16 Ensure tftp server services are not in useCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.17 Ensure web proxy server services are not in useCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.3 Ensure CUPS is not installedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.2.4 Ensure telnet client is not installedCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.7 Ensure DNS Server is not installedCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.2.8 Ensure FTP Server is not installedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.2.12 Ensure HTTP Proxy Server is not installedCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.2.15 Ensure dnsmasq is not installedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.2.16 Ensure mail transfer agent is configured for local-only modeCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.3.1 Ensure NIS Client is not installedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.3.3 Ensure talk client is not installedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.3.4 Ensure telnet client is not installedCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.3.5 Ensure LDAP client is not installedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.3.6 Ensure RPC is not installedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.4 Ensure nonessential services are removed or maskedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.12 (L2) Host must enable volatile key destructionCIS VMware ESXi 8.0 v1.1.0 L2VMware

CONFIGURATION MANAGEMENT, MAINTENANCE

3.1.4 Ensure DCCP is disabledCIS Ubuntu Linux 20.04 LTS Server L2 v2.0.1Unix

CONFIGURATION MANAGEMENT

3.1.5 Ensure SCTP is disabledCIS Ubuntu Linux 20.04 LTS Server L2 v2.0.1Unix

CONFIGURATION MANAGEMENT

3.1.6 Ensure RDS is disabledCIS Ubuntu Linux 20.04 LTS Workstation L2 v2.0.1Unix

CONFIGURATION MANAGEMENT

3.2.2 Ensure IP forwarding is disabledCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

3.2.2 Ensure IP forwarding is disabledCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

3.3.1 Ensure source routed packets are not acceptedCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

3.3.3 Ensure secure ICMP redirects are not acceptedCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

3.3.8 Ensure TCP SYN Cookies is enabledCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

4.2.12 Ensure SSH X11 forwarding is disabledCIS Ubuntu Linux 20.04 LTS Server L2 v2.0.1Unix

CONFIGURATION MANAGEMENT

6.1.1 (L1) Host CIM services, if enabled, must limit accessCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT

6.5.4 (L1) Host SSH daemon, if enabled, must not allow host-based authenticationCIS VMware ESXi 8.0 v1.1.0 L1 Bare MetalUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.10 (L1) Host SSH daemon, if enabled, must disable TCP forwardingCIS VMware ESXi 8.0 v1.1.0 L1 Bare MetalUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.11 (L1) Host SSH daemon, if enabled, must not permit tunnelsCIS VMware ESXi 8.0 v1.1.0 L1 Bare MetalUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

6.5.12 (L1) Host SSH daemon, if enabled, must not permit user environment settingsCIS VMware ESXi 8.0 v1.1.0 L1 Bare MetalUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

7.7 (L1) Virtual machines must limit PCI/PCIe device passthrough functionalityCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT

7.9 (L1) Virtual machines must remove unnecessary audio devicesCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT

7.13 (L1) Virtual machines must remove unnecessary parallel port devicesCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT

7.14 (L2) Virtual machines must remove unnecessary CD/DVD devicesCIS VMware ESXi 8.0 v1.1.0 L2VMware

CONFIGURATION MANAGEMENT

7.15 (L1) Virtual machines must remove unnecessary floppy devicesCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT

7.22 (L1) Virtual machines must restrict sharing of memory pages with other VMsCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT

8.4.16 (L2) Ensure Unity Interlock is disabledCIS VMware ESXi 7.0 v1.4.0 L2VMware

CONFIGURATION MANAGEMENT

8.4.18 (L2) Ensure Host Guest File System Server is disabledCIS VMware ESXi 7.0 v1.4.0 L2VMware

CONFIGURATION MANAGEMENT

8.5 (L1) VMware Tools must limit the automatic addition of featuresCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT

8.7 (L1) VMware Tools must deactivate GlobalConf unless requiredCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT

8.11 (L1) VMware Tools must deactivate Service Discovery unless requiredCIS VMware ESXi 8.0 v1.1.0 L1VMware

CONFIGURATION MANAGEMENT