Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
86 rules foundof 16,927Page 2 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-APACHE-3.11 | Ensure Group Write Access for the Apache Directories and Files Is Properly Restrictedapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-3.12 | Ensure Group Write Access for the Document Root Directories and Files Is Properly Restrictedapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-3.13 | Ensure Access to Special Purpose Application Writable Directories is Properly Restrictedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-4.2 | Ensure Appropriate Access to Web Content Is Allowedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-4.3 | Ensure OverRide Is Disabled for the OS Root Directoryapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-4.4 | Ensure OverRide Is Disabled for All Directoriesapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-5.1 | Ensure Options for the OS Root Directory Are Restrictedapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-5.4 | Ensure Default HTML Content Is Removedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-5.8 | Ensure the HTTP TRACE Method Is Disabledapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-5.9 | Ensure Old HTTP Protocol Versions Are Disallowedapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-5.10 | Ensure Access to .ht* Files Is Restrictedapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-5.11 | Ensure Access to .git Files Is Restrictedapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-5.12 | Ensure Access to .svn Files Is Restrictedapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-6.1 | Ensure the Error Log Filename and Severity Level Are Configured Correctlyapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-6.3 | Ensure the Server Access Log Is Configured Correctlyapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-6.4 | Ensure Log Storage and Rotation Is Configured Correctlyapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-6.5 | Ensure Applicable Patches Are Appliedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-7.2 | Ensure a Valid Trusted Certificate Is Installedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-7.7 | Ensure SSL Compression is not Enabledapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-7.8 | Ensure Medium Strength SSL/TLS Ciphers Are Disabledapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-7.9 | Ensure All Web Content is Accessed via HTTPSapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-9.1 | Ensure the TimeOut Is Set to 10 or Lessapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-9.2 | Ensure KeepAlive Is Enabledapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-9.3 | Ensure MaxKeepAliveRequests is Set to a Value of 100 or Greaterapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-9.4 | Ensure KeepAliveTimeout is Set to a Value of 15 or Lessapache · Level 1 | apache | Medium | 1 | Automated |