Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
37 rules foundof 8,597Page 1 of 2
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-PFSENSE-2.4 | Ensure all default accounts are either disabled or utilize strong passwordspfsense · Level 1 | pfsense | Critical | 1 | Manual review |
| TMA-PFSENSE-3.4 | Ensure default password of admin is changedpfsense · Level 1 | pfsense | Critical | 1 | Manual review |
| TMA-PFSENSE-1.8 | Ensure Web Management is Set to use HTTPSpfsense · Level 1 | pfsense | High | 1 | Automated |
| TMA-PFSENSE-2.2 | Ensure LDAP or RADIUS server configuredpfsense · Level 1 | pfsense | High | 1 | Automated |
| TMA-PFSENSE-2.3 | Ensure Console Menu is Password Protectedpfsense · Level 1 | pfsense | High | 1 | Automated |
| TMA-PFSENSE-4.1.1 | Ensure no Allow Rule with Any in Destination Field present in the Firewall Rulespfsense · Level 1 | pfsense | High | 1 | Automated |
| TMA-PFSENSE-4.1.2 | Ensure no Allow Rule with Any in Source field present in the Firewall Rulespfsense · Level 1 | pfsense | High | 1 | Automated |
| TMA-PFSENSE-4.1.3 | Ensure no Allow Rule with Any in Services field present in the Firewall Rulespfsense · Level 1 | pfsense | High | 1 | Manual review |
| TMA-PFSENSE-5.4.1 | Ensure RADIUS or LDAP are being used for VPN Authenticationpfsense · Level 1 | pfsense | High | 1 | Manual review |
| TMA-PFSENSE-5.4.3 | Ensure that OpenVPN is configured to use TLS encryption for secure communications.pfsense · Level 2 | pfsense | High | 2 | Manual review |
| TMA-PFSENSE-SSH-KEY-ONLY | Ensure SSH, when enabled, accepts public key authentication onlypfsense · Level 1 | pfsense | High | 1 | Automated |
| TMA-PFSENSE-1.6 | Ensure IPv6 is disabled if not usedpfsense · Level 1 | pfsense | Medium | 1 | Automated |
| TMA-PFSENSE-1.7 | Ensure 'DNS Rebind Check' is uncheckedpfsense · Level 1 | pfsense | Medium | 1 | Automated |
| TMA-PFSENSE-1.9 | Ensure a synchronized High Availability peer is configuredpfsense · Level 1 | pfsense | Medium | 1 | Automated |
| TMA-PFSENSE-2.1 | Ensure Sessions Timeout is set to less than or equal to 10 Minutespfsense · Level 1 | pfsense | Medium | 1 | Automated |
| TMA-PFSENSE-3.1 | Ensure 'Local Account status' is set to 'Disabled'pfsense · Level 1 | pfsense | Medium | 1 | Manual review |
| TMA-PFSENSE-3.2 | Ensure Login Protection Threshold is set to 30 or lesspfsense · Level 1 | pfsense | Medium | 1 | Automated |
| TMA-PFSENSE-3.3 | Ensure Allow access again after time is set to 300 or more secondpfsense · Level 2 | pfsense | Medium | 2 | Automated |
| TMA-PFSENSE-4.1.4 | Ensure there are no Unused Policiespfsense · Level 1 | pfsense | Medium | 1 | Manual review |
| TMA-PFSENSE-4.1.5 | Ensure Logging is Enable for All Firewall Rulespfsense · Level 1 | pfsense | Medium | 1 | Manual review |
| TMA-PFSENSE-4.1.6 | Ensure ICMP Request is securely configuredpfsense · Level 1 | pfsense | Medium | 1 | Manual review |
| TMA-PFSENSE-5.1.1 | Ensure SNMP traps receivers is setpfsense · Level 1 | pfsense | Medium | 1 | Automated |
| TMA-PFSENSE-5.1.2 | Ensure SNMP traps is enabledpfsense · Level 1 | pfsense | Medium | 1 | Automated |
| TMA-PFSENSE-5.1.3 | Ensure that the add-on package NET-SNMP is installed and configured securelypfsense · Level 2 | pfsense | Medium | 2 | Manual review |
| TMA-PFSENSE-5.3.1 | Ensure 'DNSSEC' is Enable on DNS Servicepfsense · Level 1 | pfsense | Medium | 1 | Automated |