Detections
Analytics

CCI|CCI-002314

Title

Employ automated mechanisms to control remote access methods.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.11 UBTU-24-100300UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.12 UBTU-24-100310UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.46 UBTU-22-251010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.47 UBTU-22-251015UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.162 RHEL-09-251010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.163 RHEL-09-251015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.302 OL08-00-040090UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.303 OL08-00-040100UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.304 OL08-00-040101UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
3.5.3.2.3 Ensure iptables rules exist for all open portsUnixCIS Amazon Linux 2 STIG v2.0.0 STIG
3.5.3.2.3 Ensure iptables rules exist for all open portsUnixCIS Amazon Linux 2 STIG v2.0.0 L1 Server
3.5.3.2.3 Ensure iptables rules exist for all open portsUnixCIS Amazon Linux 2 STIG v2.0.0 L1 Workstation
3.5.3.2.3 Ensure iptables rules exist for all open ports - PPSM CLSA and vulnerability assessments.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.1 Ensure ufw is installedUnixCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Server
4.1.1 Ensure ufw is installedUnixCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Workstation
4.1.2 Ensure ufw service is configuredUnixCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Workstation
4.1.2 Ensure ufw service is configuredUnixCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Server
5.117 - Users must be prevented from connecting using Terminal Services.WindowsDISA Windows Vista STIG v6r41
AIOS-12-011200 - Apple iOS must implement the management setting: Disable Allow MailDrop.MDMMobileIron - DISA Apple iOS 12 v2r1
AIOS-12-011200 - Apple iOS must implement the management setting: Disable Allow MailDrop.MDMAirWatch - DISA Apple iOS 12 v2r1
AIOS-13-011200 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.MDMAirWatch - DISA Apple iOS/iPadOS 13 v2r1
AIOS-13-011200 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.MDMMobileIron - DISA Apple iOS/iPadOS 13 v2r1
AIOS-14-009400 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.MDMMobileIron - DISA Apple iOS/iPadOS 14 v1r3
AIOS-14-009400 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.MDMAirWatch - DISA Apple iOS/iPadOS 14 v1r3
AIOS-16-011000 - Apple iOS/iPadOS 16 must implement the management setting: Disable Allow MailDrop.MDMAirWatch - DISA Apple iOS/iPadOS 16 v2r1
AIOS-16-011000 - Apple iOS/iPadOS 16 must implement the management setting: Disable Allow MailDrop.MDMMobileIron - DISA Apple iOS/iPadOS 16 v2r1
AIOS-17-011000 - Apple iOS/iPadOS 17 must implement the management setting: Disable Allow MailDrop.MDMAirWatch - DISA Apple iOS/iPadOS 17 v2r2
AIOS-17-011000 - Apple iOS/iPadOS 17 must implement the management setting: Disable Allow MailDrop.MDMMobileIron - DISA Apple iOS/iPadOS 17 v2r2
AIOS-18-011000 - Apple iOS/iPadOS 18 must implement the management setting: disable Allow MailDrop.MDMAirWatch - DISA Apple iOS/iPadOS 18 v1r4
AIOS-18-011000 - Apple iOS/iPadOS 18 must implement the management setting: disable Allow MailDrop.MDMMobileIron - DISA Apple iOS/iPadOS 18 v1r4
AIX7-00-001137 - AIX must be able to control the ability of remote login for users.UnixDISA STIG AIX 7.x v3r1
ALMA-09-018720 - The firewalld service on AlmaLinux OS 9 must be active.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r3
ALMA-09-031700 - AlmaLinux OS 9 must have the firewalld package installed.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r3
AS24-U1-000670 - The Apache web server must restrict inbound connections from nonsecure zones.UnixDISA STIG Apache Server 2.4 Unix Server v3r2 Middleware
AS24-U1-000670 - The Apache web server must restrict inbound connections from nonsecure zones.UnixDISA STIG Apache Server 2.4 Unix Server v3r2
AS24-W1-000670 - The Apache web server must restrict inbound connections from nonsecure zones.WindowsDISA STIG Apache Server 2.4 Windows Server v2r3
AS24-W1-000670 - The Apache web server must restrict inbound connections from nonsecure zones.WindowsDISA STIG Apache Server 2.4 Windows Server v3r3
AS24-W2-000670 - The Apache web server must restrict inbound connections from nonsecure zones.WindowsDISA STIG Apache Server 2.4 Windows Site v2r2
AZLX-23-001075 - Amazon Linux 2023 must have the firewalld package installed.UnixDISA Amazon Linux 2023 STIG v1r1
AZLX-23-001080 - Amazon Linux 2023 must have the firewalld servicew active.UnixDISA Amazon Linux 2023 STIG v1r1
Big Sur - Control remote access methodsUnixNIST macOS Big Sur v1.4.0 - All Profiles
Catalina - Control remote access methodsUnixNIST macOS Catalina v1.5.0 - All Profiles
ESXI-06-200035 - The VMM must provide the capability to immediately disconnect or disable remote access to the information system by disabling SSH.VMwareDISA STIG VMware vSphere 6.x ESXi v1r5
ESXI-67-000035 - The ESXi host must be configured to disable nonessential capabilities by disabling SSH.VMwareDISA STIG VMware vSphere 6.7 ESXi v1r3
ESXI-70-000035 - The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).VMwareDISA STIG VMware vSphere 7.0 ESXi v1r4
ESXI-80-000193 - The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).VMwareDISA VMware vSphere 8.0 ESXi STIG v2r3 VMware
ESXI-80-000193 - The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).VMwareDISA VMware vSphere 8.0 ESXi STIG v2r3 VMware
ESXi: esxi-8.deactivate-sshVMwareVMware vSphere Security Configuration and Hardening Guide
F5BI-AP-000153 - The BIG-IP APM module access policy profile must control remote access methods to virtual servers.F5DISA F5 BIG-IP Access Policy Manager STIG v2r4
F5BI-LT-000153 - The BIG-IP Core implementation providing intermediary services for remote access communications traffic must control remote access methods to virtual servers.F5DISA F5 BIG-IP Local Traffic Manager STIG v2r4