Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
359 rules foundof 11,219Page 2 of 15
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-AZURE-COMPUTE-2.1.8 | Ensure 'Minimum Inbound TLS Version' is set to '1.2' or higherazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.1.9 | Ensure end-to-end TLS encryption is enabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.1.18 | Ensure app is integrated with a virtual networkazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.2.5 | Ensure 'FTP state' is set to 'FTPS only' or 'Disabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.2.7 | Ensure 'HTTPS Only' is set to 'On'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.2.8 | Ensure 'Minimum Inbound TLS Version' is set to '1.2' or higherazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.2.9 | Ensure end-to-end TLS encryption is enabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.2.14 | Ensure deployment slot is integrated with a virtual networkazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.3.4 | Ensure 'FTP state' is set to 'FTPS only' or 'Disabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.3.6 | Ensure 'HTTPS Only' is set to 'On'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.3.7 | Ensure 'Minimum Inbound TLS Version' is set to '1.2' or higherazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.3.8 | Ensure end-to-end TLS encryption is enabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.3.14 | Ensure function app is integrated with a virtual networkazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.4.4 | Ensure 'FTP state' is set to 'FTPS only' or 'Disabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.4.6 | Ensure 'HTTPS Only' is set to 'On'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.4.7 | Ensure 'Minimum Inbound TLS Version' is set to '1.2' or higherazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.4.8 | Ensure end-to-end TLS encryption is enabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.4.13 | Ensure deployment slot is integrated with a virtual networkazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.9 | Ensure App Service Environment has TLS 1.0 and 1.1 disabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-3.2 | Ensure a Managed Identity is used for interactions with other Azure servicesazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-15.2 | Ensure Batch pools disk encryption is set enabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-15.7 | Ensure Diagnostics settings logs for Batch accounts are enabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-20.1 | Ensure Virtual Machines are utilizing Managed Disksazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-20.4 | Ensure that 'Disk Network Access' is NOT set to 'Enable public access from all networks'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-20.11 | Ensure that encryption at host is enabledazure · Level 1 | azure | High | 1 | Manual review |