Audits
Settings
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Theme
Light
Dark
Auto
Help
Plugins
Overview
Plugins Pipeline
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Release Notes
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Policies
Overview
Search
AWS Resources
Azure Resources
GCP Resources
Kubernetes Resources
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Settings
Theme
Light
Dark
Auto
Detections
Plugins
Overview
Plugins Pipeline
Release Notes
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Policies
Overview
Search
AWS Resources
Azure Resources
GCP Resources
Kubernetes Resources
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
Analytics
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Audits
Item Search
Audits
Item Search
Filters (1)
Description
Filename
Plugin
References
Control ID
Relevance
Description
Plugin
Filename
References (Active)
Search by References
Clear All
‹‹ Previous
Previous
Page 1 of 6
• 255 Total
Next
Next ››
Name
Audit Name
Plugin
Category
APPL-11-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 11 v1r7
Unix
APPL-11-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 11 v1r1
Unix
APPL-11-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 11 v1r3
Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 12 V1R2
Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 12 v1r3
Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 12 v1r4
Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 12 v1r7
Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 12 v1r5
Unix
APPL-13-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
DISA STIG Apple macOS 13 v1r1
Unix
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - From-address
DISA STIG Cisco ASA FW v1r2
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - From-address
DISA STIG Cisco ASA FW v1r3
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Logging Errors
DISA STIG Cisco ASA FW v1r3
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Logging Errors
DISA STIG Cisco ASA FW v1r2
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Severity
DISA STIG Cisco ASA FW v1r2
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Severity
DISA STIG Cisco ASA FW v1r3
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - smtp
DISA STIG Cisco ASA FW v1r2
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - From-address
DISA STIG Cisco ASA FW v1r1
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - Logging Errors
DISA STIG Cisco ASA FW v1r1
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - Recipient-address
DISA STIG Cisco ASA FW v1r1
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - Severity
DISA STIG Cisco ASA FW v1r1
Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - smtp
DISA STIG Cisco ASA FW v1r1
Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging host
DISA STIG Cisco ASA NDM v1r1
Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging host
DISA STIG Cisco ASA NDM v1r3
Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging host
DISA STIG Cisco ASA NDM v1r5
Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging trap
DISA STIG Cisco ASA NDM v1r5
Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging trap
DISA STIG Cisco ASA NDM v1r1
Cisco
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging host
DISA STIG Cisco ASA VPN v1r2
Cisco
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging host
DISA STIG Cisco ASA VPN v1r1
Cisco
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging trap
DISA STIG Cisco ASA VPN v1r1
Cisco
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging trap
DISA STIG Cisco ASA VPN v1r2
Cisco
CISC-ND-001000 - The Cisco switch must be configured to generate an alert for all audit failure events - logging host
DISA STIG Cisco IOS XE Switch NDM v1r1
Cisco
CISC-ND-001000 - The Cisco switch must be configured to generate an alert for all audit failure events.
DISA STIG Cisco NX-OS Switch NDM v1r1
Cisco
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring alerts
DISA STIG IBM DB2 v10.5 LUW v1r3 OS Linux
Unix
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring alerts
DISA STIG IBM DB2 v10.5 LUW v1r3 OS Windows
Windows
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.
DISA STIG IBM DB2 v10.5 LUW v1r4 OS Linux
Unix
DKER-EE-003340 - Log aggregation/SIEM systems must be configured to notify SA and ISSO on Docker Engine - Enterprise audit failure events.
DISA STIG Docker Enterprise 2.x Linux/Unix v1r1
Unix
FGFW-ND-000115 - The FortiGate device must generate an immediate real-time alert of all audit failure events requiring real-time alerts.
DISA Fortigate Firewall NDM STIG v1r1
FortiGate
FGFW-ND-000115 - The FortiGate device must generate an immediate real-time alert of all audit failure events requiring real-time alerts.
DISA Fortigate Firewall NDM STIG v1r3
FortiGate
FNFG-FW-000105 - If communication with the central audit server is lost, the FortiGate firewall must generate a real-time alert to, at a minimum, the SCA and ISSO.
DISA Fortigate Firewall STIG v1r1
FortiGate
JUEX-NM-000420 - The Juniper EX switch must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts.
DISA Juniper EX Series Network Device Management v1r4
Juniper
MADB-10-007500 - MariaDB must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.
DISA MariaDB Enterprise 10.x v1r2 DB
MySQLDB
Monterey - Configure Audit Failure Notification
NIST macOS Monterey v1.0.0 - 800-53r4 High
Unix
AUDIT AND ACCOUNTABILITY
Monterey - Configure Audit Failure Notification
NIST macOS Monterey v1.0.0 - 800-171
Unix
AUDIT AND ACCOUNTABILITY
Monterey - Configure Audit Failure Notification
NIST macOS Monterey v1.0.0 - All Profiles
Unix
AUDIT AND ACCOUNTABILITY
Monterey - Configure Audit Failure Notification
NIST macOS Monterey v1.0.0 - 800-53r5 High
Unix
AUDIT AND ACCOUNTABILITY
Monterey - Configure Audit Failure Notification
NIST macOS Monterey v1.0.0 - 800-53r5 Low
Unix
AUDIT AND ACCOUNTABILITY
Monterey - Configure Audit Failure Notification
NIST macOS Monterey v1.0.0 - 800-53r5 Moderate
Unix
AUDIT AND ACCOUNTABILITY
MYS8-00-009900 - The MySQL Database Server 8.0 must provide an immediate real-time alert to appropriate support staff of all audit log failures.
DISA Oracle MySQL 8.0 v1r3 DB
MySQLDB
SPLK-CL-000170 - Splunk Enterprise must notify the System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) of all audit failure events, such as loss of communications with hosts and devices, or if log records are no longer being received.
DISA STIG Splunk Enterprise 8.x for Linux v1r3 STIG REST API
Splunk
SYMP-AG-000230 - Symantec ProxySG must provide an alert to, at a minimum, the SCA and ISSO of all audit failure events where the detection and/or prevention function is unable to write events to either local storage or the centralized server. - Enabled
DISA Symantec ProxySG Benchmark ALG v1r1
BlueCoat
‹‹ Previous
Previous
Page 1 of 6
• 255 Total
Next
Next ››