CyberStrikeus/CyberStrike - Page 19

cis-ubuntu2004-v300-4-3-2

Ensure ufw is uninstalled or disabled with nftables

cis-ubuntu2004-v300-4-3-3

Ensure iptables are flushed with nftables

cis-ubuntu2004-v300-4-3-4

Ensure a nftables table exists

cis-ubuntu2004-v300-4-3-5

Ensure nftables base chains exist

cis-ubuntu2004-v300-4-3-6

Ensure nftables loopback traffic is configured

cis-ubuntu2004-v300-4-3-7

Ensure nftables outbound and established connections are configured

cis-ubuntu2004-v300-4-3-8

Ensure nftables default deny firewall policy

cis-ubuntu2004-v300-4-3-9

Ensure nftables service is enabled

cis-ubuntu2004-v300-4-4-1-1

Ensure iptables packages are installed

cis-ubuntu2004-v300-4-4-1-2

Ensure nftables is not in use with iptables

cis-ubuntu2004-v300-4-4-1-3

Ensure ufw is not in use with iptables

cis-ubuntu2004-v300-4-4-2-1

Ensure iptables default deny firewall policy

cis-ubuntu2004-v300-4-4-2-2

Ensure iptables loopback traffic is configured

cis-ubuntu2004-v300-4-4-2-3

Ensure iptables outbound and established connections are configured

cis-ubuntu2004-v300-4-4-2-4

Ensure iptables firewall rules exist for all open ports

cis-ubuntu2004-v300-4-4-3-1

Ensure ip6tables default deny firewall policy

cis-ubuntu2004-v300-4-4-3-2

Ensure ip6tables loopback traffic is configured

cis-ubuntu2004-v300-4-4-3-3

Ensure ip6tables outbound and established connections are configured

cis-ubuntu2004-v300-4-4-3-4

Ensure ip6tables firewall rules exist for all open ports

cis-ubuntu2004-v300-5-1-10

Ensure sshd HostbasedAuthentication is disabled

cis-ubuntu2004-v300-5-1-12

Ensure sshd KexAlgorithms is configured

cis-ubuntu2004-v300-5-1-14

Ensure sshd LogLevel is configured

cis-ubuntu2004-v300-5-1-15

Ensure sshd MACs are configured

cis-ubuntu2004-v300-5-1-16

Ensure sshd MaxAuthTries is configured

cis-ubuntu2004-v300-5-1-17

Ensure sshd MaxSessions is configured

cis-ubuntu2004-v300-5-1-19

Ensure sshd PermitEmptyPasswords is disabled

cis-ubuntu2004-v300-5-1-20

Ensure sshd PermitRootLogin is disabled

cis-ubuntu2004-v300-5-1-4

Ensure sshd access is configured

cis-ubuntu2004-v300-5-1-5

Ensure sshd Banner is configured

cis-ubuntu2004-v300-5-1-6

Ensure sshd Ciphers are configured

cis-ubuntu2004-v300-5-1-7

Ensure sshd ClientAliveInterval and ClientAliveCountMax are configured

cis-ubuntu2004-v300-5-1-9

Ensure sshd GSSAPIAuthentication is disabled

cis-ubuntu2004-v300-5-2-1

Ensure sudo is installed

cis-ubuntu2004-v300-5-2-2

Ensure sudo commands use pty

cis-ubuntu2004-v300-5-2-3

Ensure sudo log file exists

cis-ubuntu2004-v300-5-2-6

Ensure sudo authentication timeout is configured

cis-ubuntu2004-v300-5-3-1-1

Ensure latest version of pam is installed

cis-ubuntu2004-v300-5-3-1-2

Ensure latest version of libpam-modules is installed

cis-ubuntu2004-v300-5-3-1-3

Ensure latest version of libpam-pwquality is installed

cis-ubuntu2004-v300-5-3-2-1

Ensure pam_unix module is enabled