Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
62 rules foundof 11,219Page 2 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-CHECKPOINT-2.2.1 | Ensure SNMP agent is disabledcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.2.2 | Ensure SNMP version is set to v3-Onlycheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.2.3 | Ensure SNMP traps is enabledcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.2.4 | Ensure SNMP traps receivers is setcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.3.1 | Ensure NTP is enabled and IP address is set for Primary and Secondary NTP servercheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.5.1 | Ensure CLI session timeout is set to less than or equal to 10 minutescheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.5.2 | Ensure Web session timeout is set to less than or equal to 10 minutescheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.5.5 | Ensure allowed-client is set to those necessary for device managementcheckpoint · Level 2 | checkpoint | Medium | 2 | Automated |
| TMA-CHECKPOINT-2.6.1 | Ensure mgmtauditlogs is set to oncheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.6.2 | Ensure auditlog is set to permanentcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.6.3 | Ensure cplogs is set to oncheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-3.8 | Logging should be enable for all Firewall Rulescheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.9 | Review and Log Implied Rulescheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.10 | Ensure Drop Out of State TCP Packets is enabledcheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.11 | Ensure Drop Out of State ICMP Packets is enabledcheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.14 | Ensure Accept RIP is not enabledcheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.15 | Ensure Accept Domain Name over TCP (Zone Transfer) is not enabledcheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.16 | Ensure Accept Domain Name over UDP (Queries) is not enabledcheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.17 | Ensure Accept ICMP Requests is not enabledcheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.18 | Ensure Allow bi-directional NAT is enabledcheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.19 | Ensure Automatic ARP Configuration NAT is enabledcheckpoint · Level 2 | checkpoint | Medium | 2 | Manual review |
| TMA-CHECKPOINT-3.20 | Ensure Logging is enabled for Track Options of Global Propertiescheckpoint · Level 1 | checkpoint | Medium | 1 | Manual review |
| TMA-CHECKPOINT-ADMIN-SHELL | Ensure the admin user shell is clishcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-REMOTE-SYSLOG | Ensure logs are sent to a remote syslog servercheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.1.1 | Ensure 'Login Banner' is setcheckpoint · Level 1 | checkpoint | Low | 1 | Automated |