Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
86 rules foundof 16,927Page 3 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-APACHE-9.5 | Ensure the Timeout Limits for Request Headers is Set to 40 or Lessapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-9.6 | Ensure Timeout Limits for the Request Body is Set to 20 or Lessapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-2.4 | Ensure the Status Module Is Disabledapache · Level 1 | apache | Low | 1 | Automated |
| TMA-APACHE-2.8 | Ensure the Info Module Is Disabledapache · Level 1 | apache | Low | 1 | Automated |
| TMA-APACHE-2.9 | Ensure the Basic and Digest Authentication Modules are Disabledapache · Level 1 | apache | Low | 1 | Automated |
| TMA-APACHE-5.2 | Ensure Options for the Web Root Directory Are Restrictedapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-5.3 | Ensure Options for Other Directories Are Minimizedapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-5.5 | Ensure the Default CGI Content printenv Script Is Removedapache · Level 2 | apache | Low | 2 | Manual review |
| TMA-APACHE-5.6 | Ensure the Default CGI Content test-cgi Script Is Removedapache · Level 2 | apache | Low | 2 | Manual review |
| TMA-APACHE-5.7 | Ensure HTTP Request Methods Are Restrictedapache · Level 2 | apache | Low | 2 | Manual review |
| TMA-APACHE-5.13 | Ensure Access to Inappropriate File Extensions Is Restrictedapache · Level 2 | apache | Low | 2 | Manual review |
| TMA-APACHE-5.14 | Ensure IP Address Based Requests Are Disallowedapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-5.15 | Ensure the IP Addresses for Listening for Requests Are Specifiedapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-5.16 | Ensure Browser Framing Is Restrictedapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-5.17 | Ensure HTTP Header Referrer-Policy is set appropriatelyapache · Level 2 | apache | Low | 2 | Manual review |
| TMA-APACHE-5.18 | Ensure HTTP Header Permissions-Policy is set appropriatelyapache · Level 2 | apache | Low | 2 | Manual review |
| TMA-APACHE-6.2 | Ensure a Syslog Facility Is Configured for Error Loggingapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-6.6 | Ensure ModSecurity Is Installed and Enabledapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-7.10 | Ensure OCSP Stapling Is Enabledapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-7.11 | Ensure HTTP Strict Transport Security Is Enabledapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-7.12 | Ensure Only Cipher Suites That Provide Forward Secrecy Are Enabledapache · Level 2 | apache | Low | 2 | Automated |
| TMA-APACHE-8.1 | Ensure ServerTokens is Set to 'Prod' or 'ProductOnly'apache · Level 1 | apache | Low | 1 | Automated |
| TMA-APACHE-8.2 | Ensure ServerSignature Is Not Enabledapache · Level 1 | apache | Low | 1 | Automated |
| TMA-APACHE-8.3 | Ensure All Default Apache Content Is Removedapache · Level 2 | apache | Low | 2 | Manual review |
| TMA-APACHE-8.4 | Ensure ETag Response Header Fields Do Not Include Inodesapache · Level 2 | apache | Low | 2 | Automated |