AMLS-L3-000250 - Arista MLS must encrypt all methods of configured authentication for the OSPF routing protocol - message-digest | DISA STIG Arista MLS DCS-7000 Series RTR V1R2 | Arista | IDENTIFICATION AND AUTHENTICATION |
CISC-RT-000040 - The Cisco router must be configured to use encryption for routing protocol authentication - EIGRP | DISA STIG Cisco IOS-XR Router RTR v2r2 | Cisco | |
CISC-RT-000040 - The Cisco router must be configured to use encryption for routing protocol authentication - EIGRP | DISA STIG Cisco IOS-XR Router RTR v2r3 | Cisco | |
CISC-RT-000040 - The Cisco router must be configured to use encryption for routing protocol authentication - EIGRP | DISA STIG Cisco IOS XE Router RTR v2r6 | Cisco | |
CISC-RT-000040 - The Cisco router must be configured to use encryption for routing protocol authentication - IS-IS | DISA STIG Cisco IOS Router RTR v2r4 | Cisco | |
CISC-RT-000040 - The Cisco router must be configured to use encryption for routing protocol authentication - RIP | DISA STIG Cisco IOS Router RTR v1r4 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
CISC-RT-000040 - The Cisco switch must be configured to use encryption for routing protocol authentication - bgp | DISA STIG Cisco IOS Switch RTR v2r2 | Cisco | |
CISC-RT-000040 - The Cisco switch must be configured to use encryption for routing protocol authentication - eigrp | DISA STIG Cisco IOS XE Switch RTR v2r1 | Cisco | |
CISC-RT-000040 - The Cisco switch must be configured to use encryption for routing protocol authentication - eigrp | DISA STIG Cisco IOS Switch RTR v2r2 | Cisco | |
CISC-RT-000040 - The Cisco switch must be configured to use encryption for routing protocol authentication - is-is | DISA STIG Cisco IOS Switch RTR v1r1 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
CISC-RT-000040 - The Cisco switch must be configured to use encryption for routing protocol authentication - rip | DISA STIG Cisco IOS XE Switch RTR v2r2 | Cisco | |
CISC-RT-000050 - The Cisco router must be configured to authenticate all routing protocol messages using NIST-validated FIPS 198-1 message authentication code algorithm. | DISA STIG Cisco IOS Router RTR v2r4 | Cisco | |
CISC-RT-000050 - The Cisco switch must be configured to authenticate all routing protocol messages using NIST-validated FIPS 198-1 message authentication code algorithm. | DISA STIG Cisco IOS Switch RTR v2r1 | Cisco | |
EP11-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection. - hostssl | EDB PostgreSQL Advanced Server v11 Windows OS Audit v1r1 | Windows | CONFIGURATION MANAGEMENT |
EP11-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection. - openssl_conf | EDB PostgreSQL Advanced Server v11 Windows OS Audit v1r1 | Windows | CONFIGURATION MANAGEMENT |
EP11-00-013200 - The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 or 140-3 installation of OpenSSL - openssl_conf | EDB PostgreSQL Advanced Server v11 Windows OS Audit v2r2 | Windows | |
GEN000590 - The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes. | DISA STIG AIX 6.1 v1r14 | Unix | IDENTIFICATION AND AUTHENTICATION |
JUNI-RT-000040 - The Juniper router must be configured to use encryption for routing protocol authentication - BGP | DISA STIG Juniper Router RTR v2r3 | Juniper | |
JUNI-RT-000040 - The Juniper router must be configured to use encryption for routing protocol authentication - IS-IS | DISA STIG Juniper Router RTR v2r3 | Juniper | |
MD3X-00-000380 - MongoDB must use NIST FIPS 140-2-validated cryptographic modules for cryptographic operations. | DISA STIG MongoDB Enterprise Advanced 3.x v1r1 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
MD3X-00-000380 - MongoDB must use NIST FIPS 140-2-validated cryptographic modules for cryptographic operations. | DISA STIG MongoDB Enterprise Advanced 3.x v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
O112-C2-015700 - The DBMS must use NIST-validated FIPS 140-2-compliant cryptography for authentication mechanisms. | DISA STIG Oracle 11.2g v2r3 Windows | Windows | |
O365-CO-000015 - Consistent MIME handling must be enabled for all Office 365 ProPlus programs - mspub.exe | DISA STIG Microsoft Office 365 ProPlus v2r10 | Windows | |
O365-CO-000015 - Consistent MIME handling must be enabled for all Office 365 ProPlus programs - pptview.exe | DISA STIG Microsoft Office 365 ProPlus v2r10 | Windows | |
O365-CO-000015 - Consistent MIME handling must be enabled for all Office 365 ProPlus programs - visio.exe | DISA STIG Microsoft Office 365 ProPlus v2r10 | Windows | |
O365-CO-000019 - The MIME Sniffing safety feature must be enabled in all Office programs - msaccess.exe | DISA STIG Microsoft Office 365 ProPlus v2r10 | Windows | |
O365-CO-000019 - The MIME Sniffing safety feature must be enabled in all Office programs - pptview.exe | DISA STIG Microsoft Office 365 ProPlus v2r10 | Windows | |
O365-CO-000019 - The MIME Sniffing safety feature must be enabled in all Office programs - visio.exe | DISA STIG Microsoft Office 365 ProPlus v2r10 | Windows | |
O365-CO-000021 - Object Caching Protection must be enabled in all Office programs - pptview.exe | DISA STIG Microsoft Office 365 ProPlus v2r10 | Windows | |
OH12-1X-000253 - OHS must have the LoadModule ossl_module directive enabled to meet the requirements of applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance when encrypting stored data. | DISA STIG Oracle HTTP Server 12.1.3 v1r7 | Unix | ACCESS CONTROL |
OH12-1X-000255 - OHS must have the SSLEngine, SSLProtocol, and SSLWallet directives enabled to meet the requirements of applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance when encrypting stored data - SSLWallet | DISA STIG Oracle HTTP Server 12.1.3 v1r7 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
PGS9-00-012300 - PostgreSQL must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations. | DISA STIG PostgreSQL 9.x on RHEL OS v2r3 | Unix | |
PPS9-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations - openssl | EDB PostgreSQL Advanced Server OS Linux Audit v2r2 | Unix | |
RHEL-09-611050 - RHEL 9 password-auth must be configured to use a sufficient number of hashing rounds. | DISA Red Hat Enterprise Linux 9 STIG v2r1 | Unix | IDENTIFICATION AND AUTHENTICATION |
RHEL-09-611055 - RHEL 9 system-auth must be configured to use a sufficient number of hashing rounds. | DISA Red Hat Enterprise Linux 9 STIG v2r1 | Unix | IDENTIFICATION AND AUTHENTICATION |
RHEL-09-611150 - RHEL 9 shadow password suite must be configured to use a sufficient number of hashing rounds. | DISA Red Hat Enterprise Linux 9 STIG v2r1 | Unix | IDENTIFICATION AND AUTHENTICATION |
RHEL-09-671015 - RHEL 9 must employ FIPS 140-3 approved cryptographic hashing algorithms for all stored passwords. | DISA Red Hat Enterprise Linux 9 STIG v2r1 | Unix | IDENTIFICATION AND AUTHENTICATION |
SLES-15-020180 - The SUSE operating system must employ FIPS 140-2-approved cryptographic hashing algorithms for all stored passwords. | DISA SLES 15 STIG v2r1 | Unix | IDENTIFICATION AND AUTHENTICATION |
SLES-15-020190 - The SUSE operating system must employ FIPS 140-2-approved cryptographic hashing algorithms for all stored passwords. | DISA SLES 15 STIG v2r1 | Unix | IDENTIFICATION AND AUTHENTICATION |
SPLK-CL-000390 - Splunk Enterprise must be installed in FIPS mode to implement NIST FIPS-approved cryptography for all cryptographic functions. | DISA STIG Splunk Enterprise 8.x for Linux v1r3 STIG REST API | Splunk | |
SPLK-CL-000390 - Splunk Enterprise must be installed in FIPS mode to implement NIST FIPS-approved cryptography for all cryptographic functions. | DISA STIG Splunk Enterprise 8.x for Linux v1r4 STIG REST API | Splunk | |
SPLK-CL-000390 - Splunk Enterprise must be installed in FIPS mode to implement NIST FIPS-approved cryptography for all cryptographic functions. | DISA STIG Splunk Enterprise 8.x for Linux v1r5 STIG REST API | Splunk | |
SYMP-NM-000280 - Symantec ProxySG must be configured to use only FIPS 140-2 approved algorithms for authentication to a cryptographic module with any application or protocol. | DISA Symantec ProxySG Benchmark NDM v1r1 | BlueCoat | ACCESS CONTROL |
VCLD-67-000002 - VAMI must be configured with FIPS 140-2 compliant ciphers for HTTPS connections. | DISA STIG VMware vSphere 6.7 VAMI-lighttpd v1r1 | Unix | |
VCLD-67-000002 - VAMI must be configured with FIPS 140-2 compliant ciphers for HTTPS connections. | DISA STIG VMware vSphere 6.7 VAMI-lighttpd v1r2 | Unix | |
WN08-SO-000064 - The use of DES encryption suites must not be allowed for Kerberos encryption. | DISA Windows 8/8.1 STIG v1r23 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
WN10-SO-000190 - Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites. | DISA Windows 10 STIG v2r1 | Windows | IDENTIFICATION AND AUTHENTICATION |
WN16-SO-000350 - Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites. | DISA Windows Server 2016 STIG v2r5 | Windows | |
WN19-SO-000290 - Windows Server 2019 Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites. | DISA Windows Server 2019 STIG v2r5 | Windows | |
WN19-SO-000290 - Windows Server 2019 Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites. | DISA Windows Server 2019 STIG v2r7 | Windows | |