Nessus Compliance Checks Reference Guide
Total Page:16
File Type:pdf, Size:1020Kb
Compliance Checks Reference Guide Last Updated: September 21, 2021 Table of Contents Compliance Checks Reference 13 Compliance Standards 14 Configuration Audits, Data Leakage, and Compliance 16 Tips on String Matching 18 Adtran AOS Compliance File Reference 19 Adtran AOS Syntax 21 Amazon Web Services (AWS) Compliance File Reference 22 Audit File Syntax 23 AWS Keywords 24 AWS Debugging 26 Known Good Auditing 27 BlueCoat ProxySG Compliance File Reference 30 BlueCoat ProxySG Syntax 31 BlueCoat ProxySG Context 32 Brocade Fabric OS (FOS) Compliance File Reference 33 Brocade Fabric OS Syntax 36 Check Point GAiA Configuration Audit Compliance File Reference 37 Check Type: CONFIG_CHECK 38 Check Point GAiA Keywords 39 CONFIG_CHECK Examples 42 Conditions 43 Reporting 45 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trade- marks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective Cisco IOS Configuration Audit Compliance File Reference 46 Check Type 47 Cisco IOS Keywords 48 Command Line Examples 53 Search for a Defined SNMP ACL 54 Disable "finger" Service 55 Randomness Check to Verify SNMP Community Strings and Access Control are Sufficiently Random 56 Context Check to Verify SSH Access Control 58 Conditions 60 Citrix XenServer Audit Compliance File Reference 62 Check Type: AUDIT_XE 64 Citrix XenServer Keywords 65 Database Configuration Audit Compliance File Reference 68 Database Configuration Check Type 69 Database Configuration Keywords 70 Database Configuration Command Line Examples 73 Database Configuration Conditions 76 Dell Force10 Compliance File Reference 78 Dell Force10 Syntax 81 Extreme ExtremeXOS Compliance File Reference 82 Extreme ExtremeXOS Syntax 84 FireEye Audit Compliance File Reference 85 FireEye Check Types 87 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trade- marks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective FireEye Keywords 88 Fortinet FortiOS Audit Compliance File Reference 91 Fortinet FortiOS Syntax 93 HP ProCurve Audit Compliance File Reference 97 HP ProCurve Check Types 98 HP ProCurve Keywords 99 Huawei VRP Compliance File Reference 102 Huawei VRP Syntax 105 IBM iSeries Configuration Audit Compliance File Reference 106 Required User Privileges 107 Check Type 108 Keywords 109 Custom Items 111 Conditions 112 Juniper Junos Configuration Audit Compliance File Reference 114 Check Type: CONFIG_CHECK 115 Juniper CONFIG_CHECK Keywords 116 CONFIG_CHECK Examples 120 Check Type: SHOW_CONFIG_CHECK 121 Juniper SHOW_CONFIG_CHECK Keywords 122 SHOW_CONFIG_CHECK Examples 127 Conditions 129 Reporting 131 Microsoft Azure Audit Compliance Reference 132 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trade- marks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective Scan Requirements 133 Microsoft Azure Syntax 135 Microsoft Azure Keywords 136 MongoDB Compliance File Reference 139 MongoDB Syntax 141 MongoDB Keywords 142 NetApp Data ONTAP 143 Required User Privileges 144 Check Type: CONFIG_CHECK 145 Conditions 149 Reporting 151 OpenStack 152 OpenStack Syntax 153 OpenStack Keywords 155 Palo Alto Firewall Configuration Audit Compliance File Reference 156 AUDIT_XML 157 AUDIT_REPORTS 159 Palo Alto Firewall Keywords 162 Red Hat Enterprise Virtualization (RHEV) Compliance File Reference 164 Red Hat Enterprise Virtualization Syntax 166 Red Hat Enterprise Virtualization Debugging 167 Salesforce Compliance File Reference 168 SalesForce Setup Requirements 169 SalesForce Syntax 170 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trade- marks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective SonicWALL SonicOS Compliance File Reference 172 SonicWALL SonicOS Syntax 174 Unix Configuration Audit Compliance File Reference 175 Unix Configuration Check Type 176 Unix Configuration Keywords 177 Unix Configuration Custom Items 189 AUDIT_XML 191 AUDIT_ALLOWED_OPEN_PORTS 193 AUDIT_DENIED_OPEN_PORTS 194 AUDIT_PROCESS_ON_PORT 195 BANNER_CHECK 196 CHKCONFIG 197 CMD_EXEC 198 FILE_CHECK 199 FILE_CHECK_NOT 202 FILE_CONTENT_CHECK 204 FILE_CONTENT_CHECK_NOT 206 GRAMMAR_CHECK 207 MACOSX_DEFAULTS_READ 208 PKG_CHECK 211 PROCESS_CHECK 212 RPM_CHECK 213 SVC_PROP 215 XINETD_SVC 216 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trade- marks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective Built-In Checks 217 Password Management 218 min_password_length 219 max_password_age 221 min_password_age 223 Root Access 225 Permissions Management 226 accounts_bad_home_permissions 227 accounts_bad_home_group_permissions 228 accounts_without_home_dir 229 active_accounts_without_home_dir 230 invalid_login_shells 231 login_shells_with_suid 232 login_shells_writeable 233 login_shells_bad_owner 234 Password File Management 235 passwd_file_consistency 236 passwd_zero_uid 237 passwd_duplicate_uid 238 passwd_duplicate_gid 239 passwd_duplicate_username 240 passwd_duplicate_home 241 passwd_shadowed 242 passwd_invalid_gid 243 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trade- marks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective Group File Management 244 group_file_consistency 245 group_zero_gid 246 group_duplicate_name 247 group_duplicate_gid 248 group_duplicate_members 249 group_nonexistent_users 250 Root Environment 251 File Permissions 252 find_orphan_files 253 find_world_writeable_files 255 find_world_writeable_directories 257 find_world_readable_files 259 find_suid_sgid_files 261 home_dir_localization_files_user_check 263 home_dir_localization_files_group_check 264 Suspicious File Content 265 Unnecessary Files 266 Conditions 267 Unix Content Audit Compliance File Reference 269 Check Type 270 Item Format 271 Unix Content Command Line Examples 275 Target Test File 276 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trade- marks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective Search Files for Properly Formatted VISA Credit Card Numbers 277 Search for AMEX Credit Card Numbers 278 Auditing Different Types of File Formats 279 Performance Considerations 280 VMware vCenter/ ESXi Configuration Audit Compliance File Reference 281 Requirements 282 Supported Versions 283 Check Types 284 Keywords 286 Additional Notes 289 Windows Configuration Audit Compliance File Reference 290 Value Data 291 Complex Expressions 293 The "check_type" Field 294 The "group_policy" Field 296 The "info" Field 297 The "debug" Field 299 ACL Format 300 File Access Control Checks 301 Registry Access Control Checks 304 Service Access Control Checks 307 Launch Permission Control Checks 310 Launch2 Permission Control Checks 312 Access Permission Control Checks 314 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trade- marks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective Custom Items 316 PASSWORD_POLICY 318 LOCKOUT_POLICY 320 KERBEROS_POLICY 322 AUDIT_POLICY 324 AUDIT_POLICY_SUBCATEGORY 326 AUDIT_POWERSHELL 330 AUDIT_FILEHASH_POWERSHELL 336 AUDIT_IIS_APPCMD 338 AUDIT_ALLOWED_OPEN_PORTS 341 AUDIT_DENIED_OPEN_PORTS 343 AUDIT_PROCESS_ON_PORT 345 AUDIT_USER_TIMESTAMPS 347 BANNER_CHECK 349 CHECK_ACCOUNT 351 CHECK_LOCAL_GROUP 354 ANONYMOUS_SID_SETTING 356 SERVICE_POLICY 357 GROUP_MEMBERS_POLICY 359 USER_GROUPS_POLICY 361 USER_RIGHTS_POLICY 362 FILE_CHECK 366 FILE_VERSION 368 FILE_PERMISSIONS 370 Copyright © 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous