DISA has released the following updated Security Guidance, Security Readiness Review Scripts, Supplemental Automation Content, and Benchmarks

October 25, 2021

Unclassified Application STIGs:
https://cyber.mil/stigs/downloads/?_dl_facet_stigs=app-security
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=app-security

  • Kubernetes STIG – Version 1, Release 3
  • Microsoft Edge STIG – Version 1, Release 3
  • Microsoft IIS 10.0 STIG
  • Microsoft IIS 8.5 STIG
  • Microsoft Internet Explorer 11 STIG – Version 2, Release 1
  • Microsoft SharePoint 2013 STIG – Version 2, Release 2
  • Microsoft SQL Server 2016 STIG
  • Oracle 11.2g Database STIG – Version 2, Release 2
  • Oracle Database 12c STIG – Version 2, Release 2

Unclassified Network STIGs and SRGs:
https://cyber.mil/stigs/downloads/?_dl_facet_stigs=network-perimeter-wireless
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=network-perimeter-wireless

  • Cisco IOS-XE Router STIG
  • Cisco IOS-XE Switch STIG
  • Cisco ISE STIG
  • Cisco NX-OS Switch STIG
  • Forescout STIG
  • Virtual Private Network SRG – Version 2, Release 4

Unclassified Operating System STIGs and Overviews:
https://cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems

  • Apple macOS 11 (Big Sur) STIG – Version 1, Release 4
  • Apple OS X 10.15 STIG – Version 1, Release 6
  • Canonical Ubuntu 18.04 LTS STIG – Version 2, Release 5
  • Canonical Ubuntu 20.04 LTS STIG – Version 1, Release 2
  • IBM z/OS STIG
  • Oracle Linux 6 STIG – Version 2, Release 5
  • Oracle Linux 7 STIG – Version 2, Release 5
  • Red Hat Enterprise Linux 7 STIG – Version 3, Release 5
  • Red Hat Enterprise Linux 8 STIG – Version 1, Release 4
  • Solaris 11 SPARC STIG – Version 2, Release 5
  • Solaris 11 x86 STIG – Version 2, Release 5
  • SUSE Linux Enterprise Server (SLES) 12 STIG – Version 2, Release 5
  • SUSE Linux Enterprise Server (SLES) 15 STIG – Version 1, Release 4
  • VMware vSphere 6.5 STIG
  • z/OS ACF2 Products – Ver 6, Rel 51
  • z/OS RACF Products – Ver 6, Rel 51
  • z/OS TSS Products – Ver 6, Rel 51

Supplemental Automation Content:
https://cyber.mil/stigs/downloads/?_dl_facet_stigs=supplemental-automation-content
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=supplemental-automation-content

  • Canonical Ubuntu 18.04 LTS STIG for Ansible – Ver 2, Rel 5
  • Cisco IOS XE Router NDM RTR STIG for Ansible – Ver 2, Rel 3
  • Red Hat Enterprise Linux 7 STIG for Ansible – Ver 3, Rel 5
  • Red Hat Enterprise Linux 7 STIG for Chef – Ver 3, Rel 5
  • Red Hat Enterprise Linux 8 STIG for Ansible – Ver 1, Rel 4

Sunset:
https://cyber.mil/stigs/downloads/?_dl_facet_stigs=sunset
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=sunset

  • Sunset – Oracle Database 11g STIG – Version 9, Release 1
  • Sunset – VMware ESXi 5 Server STIG – Version 2, Release 1
  • Sunset – VMware ESXi 5 vCenter Server STIG – Version 2, Release 1
  • Sunset – VMware ESXi 5 Virtual Machine STIG – Version 2, Release 1
  • Sunset – McAfee VirusScan 8.8 Local Client STIG Benchmark – Version 1, Release 4

Benchmarks:
https://cyber.mil/stigs/downloads/?_dl_facet_stigs=scap
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=scap

  • Canonical Ubuntu 18.04 Benchmark – Version 2, Release 4
  • Cisco IOS XE Router NDM Benchmark – Version 1, Release 2
  • MS Internet Explorer 11 STIG Benchmark – Version 2, Release 1
  • Oracle Linux 7 STIG Benchmark – Version 2, Release 5
  • RHEL 7 STIG Benchmark, Version 3, Release 5
  • RHEL 8 STIG Benchmark, Version 1, Release 3
  • SLES 12 STIG Benchmark – Version 2, Release 5
  • z/OS SRR Scripts – Ver 6, Rel 51