Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
106 rules foundof 11,219Page 3 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-IOS-3.2.1.18 | Ensure "Allow USB accessories while the device is locked" is set to "Disabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.2.1.19 | Ensure "Allow pairing with non-Configurator hosts" is set to "Disabled"ios · Level 2 | ios | Medium | 2 | Manual review |
| TMA-IOS-3.2.1.20 | Ensure "Allow documents from managed sources in unmanaged destinations" is set to "Disabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.2.1.21 | Ensure "Allow documents from unmanaged sources in managed destinations" is set to "Disabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.2.1.22 | Ensure "Treat AirDrop as unmanaged destination" is set to "Enabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.2.1.24 | Ensure "Allow sending diagnostic and usage data to Apple" is set to "Disabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.2.1.25 | Ensure "Require Touch ID / Face ID authentication before AutoFill" is set to "Enabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.2.1.27 | Ensure "Allow setting up new nearby devices" is set to "Disabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.2.2.1 | Ensure "Force fraud warning" is set to "Enabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.3.1 | Ensure "Managed Safari Web Domains" is "Configured"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.5.1 | Ensure "Disable Association MAC Randomization" is "Configured"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-3.6.1 | Ensure "VPN" is "Configured"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-4.1.4 | Ensure "App Privacy Report" is enabledios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-4.7 | Ensure "Automatic Downloads" of "App Updates" is set to "Enabled"ios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IOS-4.9 | Ensure the latest iOS device architecture is used by high- value targetsios · Level 2 | ios | Medium | 2 | Manual review |
| TMA-IOS-4.11 | Ensure RCS Messaging Is Enabled Instead of SMS/MMS Where Availableios · Level 1 | ios | Medium | 1 | Manual review |
| TMA-IPADOS-4.1.4 | Ensure "App Privacy Report" is enabledios · Level 2 | ios | Medium | 2 | Manual review |
| TMA-IPADOS-4.1.6 | Ensure "Stolen Device Protection" Is Enabledios · Level 2 | ios | Medium | 2 | Manual review |
| TMA-IOS-2.1.1 | Ensure a "Consent Message" has been "Configured"ios · Level 1 | ios | Low | 1 | Manual review |
| TMA-IOS-2.2.1.1 | Ensure "Allow Siri while device is locked" is set to "Disabled"ios · Level 1 | ios | Low | 1 | Manual review |
| TMA-IOS-2.2.1.4 | Ensure "Allow personalized ads delivered by Apple" is set to "Disabled"ios · Level 1 | ios | Low | 1 | Manual review |
| TMA-IOS-2.2.1.10 | Ensure "Allow Handoff" is set to "Disabled"ios · Level 2 | ios | Low | 2 | Manual review |
| TMA-IOS-2.2.1.12 | Ensure "Force Apple Watch wrist detection" is set to "Enabled"ios · Level 1 | ios | Low | 1 | Manual review |
| TMA-IOS-2.2.2.2 | Ensure "Accept cookies" is set to "From websites I visit" or "From current website only"ios · Level 1 | ios | Low | 1 | Manual review |
| TMA-IOS-2.7.1 | Ensure "Allow user to move messages from this account" is set to "Disabled"ios · Level 1 | ios | Low | 1 | Manual review |