Audits
Settings
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Theme
Light
Dark
Auto
Help
Plugins
Overview
Plugins Pipeline
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Release Notes
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Settings
Theme
Light
Dark
Auto
Detections
Plugins
Overview
Plugins Pipeline
Release Notes
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
Analytics
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Audits
References
CCI
CCI-001094
CCI
CCI|CCI-001094
Title
Restrict the ability of individuals to launch organization-defined denial of service attacks against other systems.
Reference Item Details
Reference:
CCI - DISA Control Correlation Identifier
Category:
2024
Audit Items
View all Reference Audit Items
Name
Plugin
Audit Name
AMLS-L3-000230 - The Arista Multilayer Switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding.
Arista
DISA STIG Arista MLS DCS-7000 Series RTR v1r4
ARST-RT-000450 - The Arista perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Arista
DISA STIG Arista MLS EOS 4.2x Router v2r1
AS24-U1-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Unix
DISA STIG Apache Server 2.4 Unix Server v3r1 Middleware
AS24-U1-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Unix
DISA STIG Apache Server 2.4 Unix Server v3r1
AS24-U2-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Unix
DISA STIG Apache Server 2.4 Unix Site v2r4
AS24-U2-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Unix
DISA STIG Apache Server 2.4 Unix Site v2r4 Middleware
AS24-W1-000590 - The Apache web server must restrict the ability of users to launch denial-of-service (DoS) attacks against other information systems or networks.
Windows
DISA STIG Apache Server 2.4 Windows Server v2r3
AS24-W1-000590 - The Apache web server must restrict the ability of users to launch denial-of-service (DoS) attacks against other information systems or networks.
Windows
DISA STIG Apache Server 2.4 Windows Server v3r1
AS24-W2-000830 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Windows
DISA STIG Apache Server 2.4 Windows Site v2r1
BIND-9X-001055 - A BIND 9.x server implementation must prohibit recursion on authoritative name servers.
Unix
DISA BIND 9.x STIG v2r3
BIND-9X-001080 - A BIND 9.x implementation configured as a caching name server must restrict recursive queries to only the IP addresses and IP address ranges of known supported clients.
Unix
DISA BIND 9.x STIG v2r3
CISC-RT-000310 - The Cisco perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA STIG Cisco IOS XE Router RTR v3r1
CISC-RT-000310 - The Cisco perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA STIG Cisco IOS Router RTR v3r1
CISC-RT-000310 - The Cisco perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA STIG Cisco IOS-XR Router RTR v3r1
CISC-RT-000310 - The Cisco perimeter switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA STIG Cisco IOS XE Switch RTR v3r1
CISC-RT-000310 - The Cisco perimeter switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA STIG Cisco IOS Switch RTR v3r1
CISC-RT-000310 - The Cisco perimeter switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Cisco
DISA STIG Cisco NX-OS Switch RTR v3r1
CISC-RT-000720 - The Cisco PE router must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Cisco
DISA STIG Cisco IOS-XR Router RTR v3r1
CISC-RT-000720 - The Cisco PE router must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Cisco
DISA STIG Cisco IOS XE Router RTR v3r1
CISC-RT-000720 - The Cisco PE switch must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Cisco
DISA STIG Cisco IOS XE Switch RTR v3r1
CISC-RT-000720 - The Cisco PE switch must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Cisco
DISA STIG Cisco NX-OS Switch RTR v3r1
DKER-EE-001170 - A policy set using the built-in role-based access control (RBAC) capabilities in the Universal Control Plane (UCP) component of Docker Enterprise must be configured.
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - repositoryAccess
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r2
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - team member access
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
EX13-MB-000155 - Exchange Mail quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3
EX13-MB-000160 - Exchange Mail Quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3
EX13-MB-000165 - The Exchange Mail Store storage quota must issue a warning.
Windows
DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3
EX13-MB-000170 - Exchange Mailbox Stores must mount at startup.
Windows
DISA Microsoft Exchange 2013 Mailbox Server STIG v2r3
EX16-MB-000310 - Exchange Mail quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6
EX16-MB-000320 - Exchange Mail Quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6
EX16-MB-000340 - Exchange Mailbox Stores must mount at startup.
Windows
DISA Microsoft Exchange 2016 Mailbox Server STIG v2r6
EX19-ED-000109 More than one Edge server must be deployed.
Windows
DISA Microsoft Exchange 2019 Edge Server STIG v2r1
EX19-MB-000121 Exchange mailbox stores must mount at startup.
Windows
DISA Microsoft Exchange 2019 Mailbox Server STIG v2r1
EX19-MB-000122 Exchange mail quota settings must not restrict receiving mail.
Windows
DISA Microsoft Exchange 2019 Mailbox Server STIG v2r1
EX19-MB-000123 Exchange mail quota settings must not restrict sending mail.
Windows
DISA Microsoft Exchange 2019 Mailbox Server STIG v2r1
FNFG-FW-000070 - The FortiGate firewall must block outbound traffic containing denial-of-service (DoS) attacks to protect against the use of internal information systems to launch any DoS attacks against other networks or endpoints.
FortiGate
DISA Fortigate Firewall STIG v1r3
IIST-SI-000225 - The IIS 10.0 website must be configured to limit the maxURL.
Windows
DISA IIS 10.0 Site v2r9
IIST-SI-000226 - The IIS 10.0 website must be configured to limit the size of web requests.
Windows
DISA IIS 10.0 Site v2r9
IIST-SI-000227 - The IIS 10.0 websites Maximum Query String limit must be configured.
Windows
DISA IIS 10.0 Site v2r9
IIST-SI-000228 - Non-ASCII characters in URLs must be prohibited by any IIS 10.0 website.
Windows
DISA IIS 10.0 Site v2r9
IIST-SI-000229 - Double encoded URL requests must be prohibited by any IIS 10.0 website.
Windows
DISA IIS 10.0 Site v2r9
IIST-SI-000230 - Unlisted file extensions in URL requests must be filtered by any IIS 10.0 website.
Windows
DISA IIS 10.0 Site v2r9
IISW-SI-000225 - The IIS 8.5 website must be configured to limit the maxURL.
Windows
DISA IIS 8.5 Site v2r9
IISW-SI-000226 - The IIS 8.5 website must be configured to limit the size of web requests.
Windows
DISA IIS 8.5 Site v2r9
IISW-SI-000227 - The IIS 8.5 websites Maximum Query String limit must be configured.
Windows
DISA IIS 8.5 Site v2r9
IISW-SI-000228 - Non-ASCII characters in URLs must be prohibited by any IIS 8.5 website.
Windows
DISA IIS 8.5 Site v2r9
IISW-SI-000229 - Double encoded URL requests must be prohibited by any IIS 8.5 website.
Windows
DISA IIS 8.5 Site v2r9
IISW-SI-000230 - Unlisted file extensions in URL requests must be filtered by any IIS 8.5 website.
Windows
DISA IIS 8.5 Site v2r9
JUEX-RT-000310 - The Juniper PE router must be configured to limit the number of MAC addresses it can learn for each Virtual Private LAN Services (VPLS) bridge domain.
Juniper
DISA Juniper EX Series Router v2r1
JUEX-RT-000500 - The Juniper perimeter router must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding (uRPF).
Juniper
DISA Juniper EX Series Router v2r1
