STIG Update

DISA recently released the following updated Security Guidance, Security Readiness Review Scripts, Supplemental Automation Content, and Benchmarks:

Unclassified Application STIGs : 

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=app-security

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=app-security

  • Apache Server 2.4 UNIX STIG
  • Apache Server 2.4 Windows STIG
  • Google Chrome STIG – Ver 2, Rel 8
  • Kubernetes STIG – Ver 1, Rel 8
  • Microsoft IIS 8.5 STIG
  • Microsoft IIS 10.0 STIG
  • Microsoft Office 365 ProPlus STIG – Ver 2, Rel 8
  • Oracle Database 12c STIG – Ver 2, Rel 6
  • Oracle HTTP Server 12.1.3 STIG – Ver 2, Rel 2

Unclassified Mobility STIGs and SRGs: 

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=mobility
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=mobility

  • Samsung Android 13 with Knox 3.x STIG

Unclassified Network STIGs and SRGs: 

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=network-perimeter-wireless

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=network-perimeter-wireless

  • Cisco ASA STIG
  • Cisco IOS Router STIG
  • Cisco IOS-XE Router STIG
  • NetApp ONTAP DSC 9.x STIG – Ver 1, Rel 3
  • Network Infrastructure Policy STIG – Ver 10, Rel 4
  • Layer 2 Switch SRG – Ver 1, Rel 2

Unclassified Operating System STIGs and Overviews: 

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems

Apple macOS 11 (Big Sur) STIG – Ver 1, Rel 7

  • Apple macOS 12 (Monterey) STIG – Ver 1, Rel 5
  • Canonical Ubuntu 18.04 LTS STIG – Ver 2, Rel 9
  • Canonical Ubuntu 20.04 LTS STIG – Ver 1, Rel 6
  • General Purpose Operating System SRG – Ver 2, Rel 5
  • IBM z/OS STIG
  • Oracle Linux 7 STIG – Ver 2, Rel 10
  • Oracle Linux 8 STIG – Ver 1, Rel 5
  • Red Hat Enterprise Linux 7 STIG – Ver 3, Rel 10
  • Red Hat Enterprise Linux 8 STIG – Ver 1, Rel 9
  • Solaris 11 SPARC STIG – Ver 2, Rel 7
  • Solaris 11 x86 STIG – Ver 2, Rel 7
  • SUSE Linux Enterprise Server 12 STIG – Ver 2, Rel 9
  • SUSE Linux Enterprise Server 15 STIG – Ver 1, Rel 9

Supplemental Automation Content:

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=supplemental-automation-content

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=supplemental-automation-content

  • Canonical Ubuntu 18.04 LTS STIG for Ansible – Ver 2, Rel 10
  • Canonical Ubuntu 20.04 LTS STIG for Ansible – Ver 1, Rel 7
  • Oracle Linux 8 STIG for Ansible – Ver 1, Rel 5
  • Red Hat Enterprise Linux 7 STIG for Ansible – Ver 3, Rel 10
  • Red Hat Enterprise Linux 8 STIG for Chef – Ver 1, Rel 9
  • Red Hat Enterprise Linux 8 STIG for Ansible – Ver 1, Rel 9
  • SUSE Linux Enterprise Server (SLES) 15 STIG for Ansible – Ver 1, Rel 9

Sunset:

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=sunset

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=sunset

  • Apple OS X 10.15 STIG – Ver 1, Rel 10
  • Google Android 10 STIG
  • Google Android 11 STIG
  • Oracle Linux 6 STIG – Ver 2, Rel 7
  • Solaris 10 SPARC STIG – Ver 2, Rel 4
  • Solaris 10 x86 STIG – Ver 2, Rel 4

Benchmarks:

https://cyber.mil/stigs/downloads/?_dl_facet_stigs=scap

https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=scap

  • Canonical Ubuntu 18.04 LTS STIG Benchmark – Ver 2, Rel 8
  • Canonical Ubuntu 20.04 LTS STIG Benchmark – Ver 1, Rel 5
  • Cisco IOS-XE Router NDM STIG Benchmark – Ver 1, Rel 6
  • Google Chrome STIG Benchmark – Ver 2, Rel 8
  • Microsoft .NET Framework 4 STIG Benchmark – Ver 2, Rel 2
  • Microsoft Internet Explorer 11 STIG Benchmark – Ver 2, Rel 4
  • Microsoft Windows 10 STIG Benchmark – Ver 2, Rel 7
  • Oracle Linux 7 STIG Benchmark- Ver 2, Rel 10
  • Oracle Linux 8 STIG Benchmark – Ver 1, Rel 4
  • Red Hat Enterprise Linux 7 STIG Benchmark – Ver 3, Rel 10
  • Red Hat Enterprise Linux 8 STIG Benchmark – Ver 1, Rel 8
  • Sunset – Solaris 10 SPARC STIG Benchmark – Ver 2, Rel 4
  • Sunset – Solaris 10 X86 STIG Benchmark – Ver 2, Rel 4
  • SUSE Linux Enterprise Server 12 STIG Benchmark – Ver 2, Rel 8
  • SUSE Linux Enterprise Server 15 STIG Benchmark – Ver 1, Rel 3