Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
29 rules foundof 8,597Page 1 of 2
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-OPNSENSE-2.4 | Ensure all default accounts are either disabled or utilize strong passwordsopnsense · Level 1 | opnsense | Critical | 1 | Manual review |
| TMA-OPNSENSE-1.8 | Ensure Web Management is Set to use HTTPSopnsense · Level 1 | opnsense | High | 1 | Automated |
| TMA-OPNSENSE-2.2 | Ensure LDAP or RADIUS server configuredopnsense · Level 1 | opnsense | High | 1 | Automated |
| TMA-OPNSENSE-2.3 | Ensure Console Menu is Password Protectedopnsense · Level 1 | opnsense | High | 1 | Automated |
| TMA-OPNSENSE-4.1.1 | Ensure Default Deny is Enforced on All Internal Interfacesopnsense · Level 1 | opnsense | High | 1 | Automated |
| TMA-OPNSENSE-4.1.2 | Ensure Least Privilege is Applied to All Permit Rulesopnsense · Level 1 | opnsense | High | 1 | Automated |
| TMA-OPNSENSE-4.1.3 | Ensure “Any → Any” Rules are Prohibitedopnsense · Level 1 | opnsense | High | 1 | Manual review |
| TMA-OPNSENSE-1.6 | Ensure IPv6 is disabled if not usedopnsense · Level 1 | opnsense | Medium | 1 | Automated |
| TMA-OPNSENSE-1.7 | Ensure 'Disable DNS Rebinding Checks' is uncheckedopnsense · Level 1 | opnsense | Medium | 1 | Automated |
| TMA-OPNSENSE-2.1 | Ensure Sessions Timeout is set to less than or equal to 10 Minutesopnsense · Level 1 | opnsense | Medium | 1 | Automated |
| TMA-OPNSENSE-3.1 | Ensure 'Local Account status' is set to 'Disabled'opnsense · Level 1 | opnsense | Medium | 1 | Manual review |
| TMA-OPNSENSE-3.2 | Ensure Login Protection methods are enabled.opnsense · Level 1 | opnsense | Medium | 1 | Automated |
| TMA-OPNSENSE-3.3 | Ensure default password of admin is changedopnsense · Level 1 | opnsense | Medium | 1 | Automated |
| TMA-OPNSENSE-4.1.4 | Ensure Every Rule Has a Description Using a Standard Formatopnsense · Level 1 | opnsense | Medium | 1 | Manual review |
| TMA-OPNSENSE-4.1.5 | Ensure Aliases are Used for Hosts, Networks, and Port Groupsopnsense · Level 1 | opnsense | Medium | 1 | Manual review |
| TMA-OPNSENSE-4.1.6 | Ensure Rules are Implemented on the Ingress Interfaceopnsense · Level 1 | opnsense | Medium | 1 | Manual review |
| TMA-OPNSENSE-4.1.7 | Ensure Standard Rule Ordering is Used Per Interfaceopnsense · Level 1 | opnsense | Medium | 1 | Manual review |
| TMA-OPNSENSE-4.1.8 | Ensure Floating Rules are Restricted to Cross-Zone Policy Use Casesopnsense · Level 1 | opnsense | Medium | 1 | Manual review |
| TMA-OPNSENSE-5.1.1 | Ensure time zone is properly configuredopnsense · Level 1 | opnsense | Medium | 1 | Automated |
| TMA-OPNSENSE-5.3.1 | Ensure WireGuard is used as the default VPN methodopnsense · Level 1 | opnsense | Medium | 1 | Automated |
| TMA-OPNSENSE-6.1 | Ensure Logging is Enabled for Inter-Zone Deny Rulesopnsense · Level 1 | opnsense | Medium | 1 | Automated |
| TMA-OPNSENSE-6.2 | Ensure Logging is Enabled for Management Plane Deny Rulesopnsense · Level 1 | opnsense | Medium | 1 | Manual review |
| TMA-OPNSENSE-6.3 | Ensure Remote Syslog is Configuredopnsense · Level 1 | opnsense | Medium | 1 | Manual review |
| TMA-OPNSENSE-1.1 | Ensure SSH warning banner is configuredopnsense · Level 1 | opnsense | Low | 1 | Manual review |
| TMA-OPNSENSE-1.2 | Ensure Backup count is set to 5 or more.opnsense · Level 1 | opnsense | Low | 1 | Manual review |