Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
81 rules foundof 8,597Page 1 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-CISCO-ASA-1.1.1 | Ensure 'Logon Password' is setcisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.1.2 | Ensure 'Enable Password' is setcisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.1.4 | Ensure 'Password Recovery' is disabledcisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.1.5 | Ensure 'Password Policy' is enabledcisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.1.1 | Ensure 'aaa local authentication max failed attempts' is set to less than or equal to '3'cisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.1.3 | Ensure known default accounts do not existcisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.2.1 | Ensure 'TACACS+/RADIUS' is configured correctlycisco-asa · Level 2 | cisco-asa | High | 2 | Automated |
| TMA-CISCO-ASA-1.4.3.1 | Ensure 'aaa authentication enable console' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.3.2 | Ensure 'aaa authentication http console' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.3.3 | Ensure 'aaa authentication secure-http-client' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.3.4 | Ensure 'aaa authentication ssh console' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.4.1 | Ensure 'aaa command authorization' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.4.2 | Ensure 'aaa authorization exec' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.5.1 | Ensure 'aaa accounting command' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.5.2 | Ensure 'aaa accounting for SSH' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.4.5.3 | Ensure 'aaa accounting for EXEC mode' is configured correctlycisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.6.1 | Ensure 'SSH source restriction' is set to an authorized IP addresscisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.6.2 | Ensure 'SSH version 2' is enabledcisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.6.5 | Ensure 'Telnet' is disabledcisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.7.1 | Ensure 'HTTP source restriction' is set to an authorized IP addresscisco-asa · Level 2 | cisco-asa | High | 2 | Automated |
| TMA-CISCO-ASA-1.7.2 | Ensure 'TLS 1.2' or greater is set for HTTPS accesscisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.7.3 | Ensure 'SSL AES 256 encryption' is set for HTTPS accesscisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.8.2 | Ensure 'SSH session timeout' is less than or equal to '5' minutescisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.8.3 | Ensure 'HTTP idle timeout' is less than or equal to '5' minutescisco-asa · Level 1 | cisco-asa | High | 1 | Automated |
| TMA-CISCO-ASA-1.9.1.1 | Ensure 'NTP authentication' is enabledcisco-asa · Level 1 | cisco-asa | High | 1 | Automated |