Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
62 rules foundof 8,597Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-CHECKPOINT-1.1 | Ensure Minimum Password Length is set to 14 or highercheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-1.3 | Ensure Password Complexity is set to 3checkpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-1.4 | Ensure Check for Password Reuse is selected and History Length is set to 12 or morecheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-1.5 | Ensure Password Expiration is set to 90 dayscheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-1.6 | Ensure Warn users before password expiration is set to 7 dayscheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-1.7 | Ensure Lockout users after password expiration is set to 1checkpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-1.10 | Ensure Force users to change password at first login after password was changed from Users page is selectedcheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-1.11 | Ensure Deny access after failed login attempts is selectedcheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-1.12 | Ensure Maximum number of failed attempts allowed is set to 5 or fewercheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-2.1.9 | Ensure Telnet is disabledcheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-2.5.3 | Ensure Client Authentication is secured.checkpoint · Level 1 | checkpoint | High | 1 | Manual review |
| TMA-CHECKPOINT-2.5.4 | Ensure Radius or TACACS+ server is configuredcheckpoint · Level 1 | checkpoint | High | 1 | Automated |
| TMA-CHECKPOINT-3.1 | Enable the Firewall Stealth Rulecheckpoint · Level 2 | checkpoint | High | 2 | Manual review |
| TMA-CHECKPOINT-3.2 | Configure a Default Drop/Cleanup Rulecheckpoint · Level 2 | checkpoint | High | 2 | Manual review |
| TMA-CHECKPOINT-3.5 | Ensure no Allow Rule with Any in Destination filed present in the Firewall Rulescheckpoint · Level 2 | checkpoint | High | 2 | Manual review |
| TMA-CHECKPOINT-3.6 | Ensure no Allow Rule with Any in Source filed present in the Firewall Rulescheckpoint · Level 2 | checkpoint | High | 2 | Manual review |
| TMA-CHECKPOINT-3.7 | Ensure no Allow Rule with Any in Services filed present in the Firewall Rulescheckpoint · Level 2 | checkpoint | High | 2 | Manual review |
| TMA-CHECKPOINT-3.12 | Ensure Anti-Spoofing is enabled and action is set to Prevent for all Interfacescheckpoint · Level 2 | checkpoint | High | 2 | Manual review |
| TMA-CHECKPOINT-1.2 | Ensure Disallow Palindromes is selectedcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-1.8 | Ensure Deny access to unused accounts is selectedcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-1.9 | Ensure Days of non-use before lock-out is set to 30checkpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-1.13 | Ensure Allow access again after time is set to 300 or more secondscheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.1.5 | Ensure unused interfaces are disabledcheckpoint · Level 1 | checkpoint | Medium | 1 | Manual review |
| TMA-CHECKPOINT-2.1.7 | Ensure IPv6 is disabled if not usedcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |
| TMA-CHECKPOINT-2.1.10 | Ensure DHCP is disabledcheckpoint · Level 1 | checkpoint | Medium | 1 | Automated |