Item Search

NameAudit NamePluginCategory
AIOS-16-013400 - The Apple iOS must be configured to disable automatic transfer of diagnostic data to an external device other than an MDM service with which the device has enrolled.AirWatch - DISA Apple iOS/iPadOS 16 v2r1MDM

SYSTEM AND COMMUNICATIONS PROTECTION

AIOS-17-008400 - Apple iOS/iPadOS 17 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.MobileIron - DISA Apple iOS/iPadOS 17 v2r1MDM

ACCESS CONTROL

AIOS-17-010900 - Apple iOS/iPadOS 17 must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device.MobileIron - DISA Apple iOS/iPadOS 17 v2r1MDM

ACCESS CONTROL

AIOS-17-010950 - Apple iOS/iPadOS 17 must implement the management setting: require passcode for incoming Airplay connection requests.AirWatch - DISA Apple iOS/iPadOS 17 v2r1MDM

ACCESS CONTROL

AIOS-17-011800 - Apple iOS/iPadOS 17 must implement the management setting: force Apple Watch wrist detection.AirWatch - DISA Apple iOS/iPadOS 17 v2r1MDM

CONFIGURATION MANAGEMENT

AIOS-17-012300 - Apple iOS/iPadOS 17 must not allow managed apps to write contacts to unmanaged contacts accounts.AirWatch - DISA Apple iOS/iPadOS 17 v2r1MDM

CONFIGURATION MANAGEMENT

AIOS-17-710900 - Apple iOS/iPadOS 17 must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device.MobileIron - DISA Apple iOS/iPadOS BYOAD 17 v1r1MDM

ACCESS CONTROL

AIOS-17-712300 - Apple iOS/iPadOS 17 must not allow managed apps to write contacts to unmanaged contacts accounts.AirWatch - DISA Apple iOS/iPadOS 17 BYOAD v1r1MDM

CONFIGURATION MANAGEMENT

AIOS-17-713400 - The Apple iOS must be configured to disable automatic transfer of diagnostic data to an external device other than an MDM service with which the device has enrolled.AirWatch - DISA Apple iOS/iPadOS 17 BYOAD v1r1MDM

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-11-002062 - The macOS system must be configured with Bluetooth turned off unless approved by the organization - DisableBluetoothDISA STIG Apple macOS 11 v1r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-11-002062 - The macOS system must be configured with Bluetooth turned off unless approved by the organization - HiddenPreferencePanesDISA STIG Apple macOS 11 v1r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

ESXI-80-000207 The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.DISA VMware vSphere 8.0 ESXi STIG OS v2r1Unix

CONFIGURATION MANAGEMENT

F5BI-AP-000236 - The F5 BIG-IP appliance must be configured to limit authenticated client sessions to initial session source IP.DISA F5 BIG-IP Access Policy Manager STIG v2r3F5

SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-11-000500 - Google Android 11 must be configured to not allow more than ten consecutive failed authentication attempts.AirWatch - DISA Google Android 11 COPE v2r1MDM

ACCESS CONTROL

GOOG-11-003400 - Google Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.AirWatch - DISA Google Android 11 COBO v2r1MDM

ACCESS CONTROL

GOOG-11-006100 - Google Android 11 must be configured to generate audit records for the following auditable events: detected integrity violations.AirWatch - DISA Google Android 11 COBO v2r1MDM

AUDIT AND ACCOUNTABILITY

GOOG-11-006100 - Google Android 11 must be configured to generate audit records for the following auditable events: detected integrity violations.MobileIron - DISA Google Android 11 COBO v2r1MDM

AUDIT AND ACCOUNTABILITY

GOOG-11-011100 - Google Android 11 devices must be configured to enable Common Criteria Mode (CC Mode).MobileIron - DISA Google Android 11 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-12-007700 - Google Android 12 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.AirWatch - DISA Google Android 12 COPE v1r2MDM

ACCESS CONTROL

GOOG-12-011000 - Android 12 devices must be configured to enable Common Criteria Mode (CC Mode).AirWatch - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-13-010900 - Android 13 devices must be configured to disable the use of third-party keyboards.AirWatch - DISA Google Android 13 COBO v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-13-010900 - Android 13 devices must be configured to disable the use of third-party keyboards.MobileIron - DISA Google Android 13 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-13-011000 - Android 13 devices must be configured to enable Common Criteria Mode (CC Mode) - CC Mode.MobileIron - DISA Google Android 13 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-13-707700 - Google Android 13 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the Work Profile.MobileIron - DISA Google Android 13 BYOD v1r2MDM

ACCESS CONTROL

GOOG-14-011000 - Android 14 devices must be configured to enable Common Criteria Mode (CC Mode) - CC Mode.MobileIron - DISA Google Android 14 COPE v2r1MDM

CONFIGURATION MANAGEMENT

GOOG-14-012400 - Google Android 14 must allow only the administrator (MDM) to perform the following management function: Disable Phone Hub - MDM to perform the following management function: Disable Phone Hub.AirWatch - DISA Google Android 14 COPE v2r1MDM

SYSTEM AND COMMUNICATIONS PROTECTION

HONW-09-000500 - The Honeywell Mobility Edge Android Pie device must be configured to not allow more than 10 consecutive failed authentication attempts.MobileIron - DISA Honeywell Android 9.x COPE v1r2MDM

ACCESS CONTROL

HONW-09-006100 - The Honeywell Mobility Edge Android Pie device must be configured to generate audit records for the following auditable events: detected integrity violations.MobileIron - DISA Honeywell Android 9.x COBO v1r2MDM

AUDIT AND ACCOUNTABILITY

JUEX-L2-000160 - The Juniper EX switch must be configured to enable IGMP or MLD Snooping on all VLANs.DISA Juniper EX Series Layer 2 Switch v2r1Juniper

CONFIGURATION MANAGEMENT

JUEX-RT-000080 - The Juniper router configured for Multicast Source Discovery Protocol (MSDP) must filter source-active multicast advertisements to external MSDP peers to avoid global visibility of local-only multicast sources and groups.DISA Juniper EX Series Router v2r1Juniper

ACCESS CONTROL

MSFT-11-003400 - Microsoft Android 11 must be configured to display the DOD advisory warning message at start-up or each time the user unlocks the device.MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

ACCESS CONTROL

SQL2-00-039100 - The SQL Server Browser service must be disabled if its use is not necessary.DISA STIG SQL Server 2012 Database OS Audit v1r20Windows

CONFIGURATION MANAGEMENT

VMCH-80-000192 Virtual machines (VMs) must have paste operations disabled.DISA VMware vSphere 8.0 Virtual Machine STIG v2r1VMware

CONFIGURATION MANAGEMENT

VMCH-80-000199 Virtual machines (VMs) must have shared salt values disabled.DISA VMware vSphere 8.0 Virtual Machine STIG v2r1VMware

CONFIGURATION MANAGEMENT

VMCH-80-000200 Virtual machines (VMs) must disable access through the "dvfilter" network Application Programming Interface (API).DISA VMware vSphere 8.0 Virtual Machine STIG v2r1VMware

CONFIGURATION MANAGEMENT

WBSP-AS-000640 - The WebSphere Application Server must alert the SA and ISSO, in the event of a log processing failure - notificationDISA IBM WebSphere Traditional 9 STIG v1r1Unix

AUDIT AND ACCOUNTABILITY

WBSP-AS-000660 - The WebSphere Application Server must shut down by default upon log failure (unless availability is an overriding concern).DISA IBM WebSphere Traditional 9 STIG v1r1 MiddlewareUnix

AUDIT AND ACCOUNTABILITY

WBSP-AS-000940 - The WebSphere Application Server must remove JREs left by web server and plug-in installers in the DMZ.DISA IBM WebSphere Traditional 9 STIG v1r1 MiddlewareUnix

CONFIGURATION MANAGEMENT

WBSP-AS-001470 - The WebSphere Application Server must be configured to perform complete application deployments when using A/B clusters.DISA IBM WebSphere Traditional 9 STIG v1r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

WN10-CC-000080 - Virtualization-based protection of code integrity must be enabled.DISA Windows 10 STIG v3r2Windows

CONFIGURATION MANAGEMENT

WN11-00-000085 - Standard local user accounts must not exist on a system in a domain.DISA Windows 11 STIG v2r2Windows

CONFIGURATION MANAGEMENT

WN11-CC-000035 - The system must be configured to ignore NetBIOS name release requests except from WINS servers.DISA Windows 11 STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN11-CC-000197 - Microsoft consumer experiences must be turned off.DISA Windows 11 STIG v2r2Windows

CONFIGURATION MANAGEMENT

WN11-CC-000220 - File Explorer heap termination on corruption must be disabled.DISA Windows 11 STIG v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN11-CC-000390 - Windows 11 must be configured to prevent users from receiving suggestions for third-party or additional applications.DISA Windows 11 STIG v2r2Windows

CONFIGURATION MANAGEMENT

ZEBR-10-011000 - Zebra Android 10 devices must be configured to disable the use of third-party keyboards.AirWatch - DISA Zebra Android 10 COPE v1r2MDM

CONFIGURATION MANAGEMENT

ZEBR-11-003400 - Zebra Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.AirWatch - DISA Zebra Android 11 COBO v1r3MDM

ACCESS CONTROL

ZEBR-11-006100 - Zebra Android 11 must be configured to generate audit records for the following auditable events: Detected integrity violations.MobileIron - DISA Zebra Android 11 COBO v1r3MDM

AUDIT AND ACCOUNTABILITY

ZEBR-11-011000 - Zebra Android 11 devices must be configured to disable the use of third-party keyboards.AirWatch - DISA Zebra Android 11 COBO v1r3MDM

CONFIGURATION MANAGEMENT

ZEBR-11-011100 - Zebra Android 11 devices must be configured to enable Common Criteria Mode (CC Mode).AirWatch - DISA Zebra Android 11 COBO v1r3MDM

CONFIGURATION MANAGEMENT