CCI-002322
Provide the capability to disconnect or disable remote access to the system within the organization-defined time period.
OHS must provide the capability to immediately disconnect or disable remote access to the hosted applications.
1 rule found Severity: Medium
Common Access Card (CAC)-based authentication must be enabled and enforced on the Tanium Server for all access and all accounts.
2 rules found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Low
Network access to HTTP management must be disabled on domain-enabled application servers not designated as the domain controller.
1 rule found Severity: Medium
The IIS 10.0 web server must provide the capability to immediately disconnect or disable remote access to the hosted applications.
1 rule found Severity: Medium
The IIS 10.0 website must provide the capability to immediately disconnect or disable remote access to the hosted applications.
1 rule found Severity: Medium
SLEM 5 must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments.
1 rule found Severity: Medium
The web server must provide the capability to immediately disconnect or disable remote access to the hosted applications.
1 rule found Severity: Medium
The Apache web server must be configured to immediately disconnect or disable remote access to the hosted applications.
2 rules found Severity: Medium
The application server must provide the capability to immediately disconnect or disable remote access to the management interface.
1 rule found Severity: Medium
The ALG providing intermediary services for remote access communications traffic must provide the capability to immediately disconnect or disable remote access to the information system.
1 rule found Severity: Medium
The operating system must provide the capability to immediately disconnect or disable remote access to the operating system.
1 rule found Severity: Medium
The Palo Alto Networks security, if used as a TLS gateway/decryption point or VPN concentrator, must provide the capability to immediately disconnect or disable remote access to the information system.
1 rule found Severity: Medium
A firewall must be able to protect against or limit the effects of denial-of-service (DoS) attacks by ensuring OL 8 can implement rate-limiting measures on impacted network interfaces.
1 rule found Severity: Medium
The SUSE operating system must have a firewall system installed to immediately disconnect or disable remote access to the whole operating system.
1 rule found Severity: Medium
The VMM must provide the capability to immediately disconnect or disable remote access to the information system.
1 rule found Severity: Medium
The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).
3 rules found Severity: Medium