CCI|CCI-004866

Employ organization-defined controls by type of denial-of-service to achieve the denial-of-service objective.

Reference: CCI - DISA Control Correlation Identifier

Category: 2024

Name	Plugin	Audit Name
CASA-FW-000150 - The Cisco ASA must be configured to enable threat detection to mitigate risks of denial-of-service (DoS) attacks.	Cisco	DISA STIG Cisco ASA FW v2r1
CISC-L2-000040 - The Cisco switch must manage excess bandwidth to limit the effects of packet-flooding types of denial-of-service (DoS) attacks.	Cisco	DISA STIG Cisco IOS Switch L2S v3r1
JUEX-RT-000610 - The Juniper router must be configured to have IP directed broadcast disabled on all interfaces.	Juniper	DISA Juniper EX Series Router v2r1
JUSX-AG-000121 - The Juniper SRX Services Gateway Firewall must implement load balancing on the perimeter firewall, at a minimum, to limit the effects of known and unknown types of denial-of-service (DoS) attacks on the network - DoS attacks on the network.	Juniper	DISA Juniper SRX Services Gateway ALG v3r2
JUSX-VN-000001 - The Juniper SRX Services Gateway VPN must limit the number of concurrent sessions for user accounts to one (1) and administrative accounts to three (3), or set to an organization-defined number.	Juniper	DISA Juniper SRX Services Gateway VPN v3r1
JUSX-VN-000016 - The Juniper SRX Services Gateway VPN must use IKEv2 for IPsec VPN security associations.	Juniper	DISA Juniper SRX Services Gateway VPN v3r1