Detections
Analytics

CCI|CCI-001551

Title

The organization defines approved authorizations for controlling the flow of information between interconnected systems.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
GEN003600 - The system must not forward IPv4 source-routed packetsUnixDISA STIG HP-UX 11.31 v1r19
GEN003600 - The system must not forward IPv4 source-routed packets - 'net.ipv4.conf.all.accept_source_route'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r17 Audit
GEN003600 - The system must not forward IPv4 source-routed packets - 'net.ipv4.conf.all.accept_source_route'UnixDISA STIG for Oracle Linux 5 v1r14
GEN003600 - The system must not forward IPv4 source-routed packets - 'net.ipv4.conf.all.accept_source_route'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN003600 - The system must not forward IPv4 source-routed packets - 'net.ipv4.conf.all.accept_source_route'UnixDISA STIG for Oracle Linux 5 v2r1
GEN003600 - The system must not forward IPv4 source-routed packets - 'net.ipv4.conf.default.accept_source_route'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r17 Audit
GEN003600 - The system must not forward IPv4 source-routed packets - 'net.ipv4.conf.default.accept_source_route'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN003600 - The system must not forward IPv4 source-routed packets - 'net.ipv4.conf.default.accept_source_route'UnixDISA STIG for Oracle Linux 5 v1r14
GEN003600 - The system must not forward IPv4 source-routed packets - 'net.ipv4.conf.default.accept_source_route'UnixDISA STIG for Oracle Linux 5 v2r1
GEN003600 - The system must not forward IPv4 source-routed packets.UnixDISA STIG AIX 6.1 v1r14
GEN003600 - The system must not forward IPv4 source-routed packets.UnixDISA STIG AIX 5.3 v1r2
GEN003600 - The system must not forward IPv4 source-routed packets.UnixDISA STIG AIX 6.1 v1r13
GEN003602 - The system must not process ICMP timestamp requests.UnixDISA STIG AIX 6.1 v1r14
GEN003602 - The system must not process ICMP timestamp requests.UnixDISA STIG AIX 5.3 v1r2
GEN003602 - The system must not process ICMP timestamp requests.UnixDISA STIG AIX 6.1 v1r13
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requestsUnixDISA STIG HP-UX 11.31 v1r19
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-reply -j DROP'UnixDISA STIG for Oracle Linux 5 v1r14
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-reply -j DROP'UnixDISA STIG for Oracle Linux 5 v2r1
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-request -j DROP'UnixDISA STIG for Oracle Linux 5 v2r1
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-request -j DROP'UnixDISA STIG for Oracle Linux 5 v1r14
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-reply -j DROP'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r17 Audit
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-reply -j DROP'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-request -j DROP'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN003602 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'timestamp-request -j DROP'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r17 Audit
GEN003602 M6 - The system must not process Internet Control Message Protocol (ICMP) timestamp requests - 'net.inet.icmp.timestamp:1'UnixDISA STIG Apple Mac OSX 10.6 v1r3
GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast addressUnixDISA STIG HP-UX 11.31 v1r19
GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast address.UnixDISA STIG for Red Hat Enterprise Linux 5 v1r17 Audit
GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast address.UnixDISA STIG AIX 5.3 v1r2
GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast address.UnixDISA STIG AIX 6.1 v1r13
GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast address.UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN003603 - The system must not respond to ICMPv4 echoes sent to a broadcast address.UnixDISA STIG AIX 6.1 v1r14
GEN003603 - The system must not respond to Internet Control Message Protocol v4 (ICMPv4) echoes sent to a broadcast address.UnixDISA STIG for Oracle Linux 5 v1r14
GEN003603 - The system must not respond to Internet Control Message Protocol v4 (ICMPv4) echoes sent to a broadcast address.UnixDISA STIG for Oracle Linux 5 v2r1
GEN003603 M6 - System must not respond to ICMP (ICMPv4) echoes to a broadcast address - 'net.inet.icmp.bmcastecho:1'UnixDISA STIG Apple Mac OSX 10.6 v1r3
GEN003604 - The system must not respond to ICMP timestamp requests sent to a broadcast address.UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN003604 - The system must not respond to ICMP timestamp requests sent to a broadcast address.UnixDISA STIG AIX 6.1 v1r13
GEN003604 - The system must not respond to ICMP timestamp requests sent to a broadcast address.UnixDISA STIG AIX 5.3 v1r2
GEN003604 - The system must not respond to ICMP timestamp requests sent to a broadcast address.UnixDISA STIG AIX 6.1 v1r14
GEN003604 - The system must not respond to ICMP timestamp requests sent to a broadcast address.UnixDISA STIG for Red Hat Enterprise Linux 5 v1r17 Audit
GEN003604 - The system must not respond to Internet Control Message Protocol (ICMP) timestamp requests sent to a broadcast addressUnixDISA STIG HP-UX 11.31 v1r19
GEN003604 - The system must not respond to Internet Control Message Protocol (ICMP) timestamp requests sent to a broadcast address.UnixDISA STIG for Oracle Linux 5 v2r1
GEN003604 - The system must not respond to Internet Control Message Protocol (ICMP) timestamp requests sent to a broadcast address.UnixDISA STIG for Oracle Linux 5 v1r14
GEN003605 - The system must not apply reversed source routing to TCP responsesUnixDISA STIG HP-UX 11.31 v1r19
GEN003605 - The system must not apply reversed source routing to TCP responses.UnixDISA STIG AIX 5.3 v1r2
GEN003605 - The system must not apply reversed source routing to TCP responses.UnixDISA STIG AIX 6.1 v1r13
GEN003605 - The system must not apply reversed source routing to TCP responses.UnixDISA STIG AIX 6.1 v1r14
GEN003606 - The system must prevent local applications from generating source-routed packets - 'lsrr'UnixDISA STIG HP-UX 11.31 v1r19
GEN003606 - The system must prevent local applications from generating source-routed packets - 'ssrr'UnixDISA STIG HP-UX 11.31 v1r19
GEN003606 - The system must prevent local applications from generating source-routed packets.UnixDISA STIG AIX 6.1 v1r14
GEN003606 - The system must prevent local applications from generating source-routed packets.UnixDISA STIG AIX 6.1 v1r13