0 items selected
Showing 50 of 246 grouped items (247 total POA&Ms)
— Page 3 of 5
| Item # | Assets | Title | Severity | Progress | Status | Due Date | Close | Actions | |
|---|---|---|---|---|---|---|---|---|---|
| POAM-00094 | T-ESD-1 | V-225015: The "Deny access to this computer from the network" user right on member servers must be configured | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00095 | T-ESD-1 | V-225017: The "Deny log on as a service" user right on member servers must be configured to prevent access fro | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00096 | T-ESD-1 | V-225018: The "Deny log on locally" user right on member servers must be configured to prevent access from hig | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00097 | T-ESD-1 | V-225019: The "Deny log on through Remote Desktop Services" user right on member servers must be configured to | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00098 | T-ESD-1 | V-257502: Windows Server 2016 must have PowerShell Transcription enabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00099 | T-ESD-1 | V-225224: The Trust Providers Software Publishing State must be set to 0x23C00. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00100 | T-ESD-1 | V-225233: Trust must be established prior to enabling the loading of remote code in .Net 4. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00101 | T-ESD-1 | V-218786: Both the log file and Event Tracing for Windows (ETW) for the IIS 10.0 web server must be enabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00102 | T-ESD-1 | V-218788: The IIS 10.0 web server must produce log records that contain sufficient information to establish th | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00103 | T-ESD-1 | V-218789: The IIS 10.0 web server must produce log records containing sufficient information to establish the | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00104 | T-ESD-1 | V-218790: The log information from the IIS 10.0 web server must be protected from unauthorized modification or | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00105 | T-ESD-1 | V-218793: The IIS 10.0 web server must only contain functions necessary for operation. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00106 | T-ESD-1 | V-218797: The IIS 10.0 web server must be reviewed on a regular basis to remove any Operating System features, | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00107 | T-ESD-1 | V-218798: The IIS 10.0 web server must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00108 | T-ESD-1 | V-218805: The IIS 10.0 web server must accept only system-generated session identifiers. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00109 | T-ESD-1 | V-218806: The IIS 10.0 web server must augment re-creation to a stable and known baseline. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00110 | T-ESD-1 | V-218812: The IIS 10.0 web server must restrict inbound connections from non-secure zones. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00111 | T-ESD-1 | V-218817: The IIS 10.0 web server must not be running on a system providing any other role. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00112 | T-ESD-1 | V-218819: The IIS 10.0 web server must be tuned to handle the operational requirements of the hosted applicati | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00113 | T-ESD-1 | V-228572: An IIS Server configured to be a SMTP relay must require authentication. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00116 | T-ESD-1 | V-268325: The Request Smuggling filter must be enabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00117 | T-ESD-1 | V-218739: Both the log file and Event Tracing for Windows (ETW) for each IIS 10.0 website must be enabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00118 | T-ESD-1 | V-218741: The IIS 10.0 website must produce log records that contain sufficient information to establish the o | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00119 | T-ESD-1 | V-218742: The IIS 10.0 website must produce log records containing sufficient information to establish the ide | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00120 | T-ESD-1 | V-218743: The IIS 10.0 website must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell pro | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00121 | T-ESD-1 | V-218744: Mappings to unused and vulnerable scripts on the IIS 10.0 website must be removed. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00122 | T-ESD-1 | V-218749: A private IIS 10.0 website authentication mechanism must use client certificates to transmit session | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00123 | T-ESD-1 | V-218763: The IIS 10.0 websites connectionTimeout setting must be explicitly configured to disconnect an idle | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00125 | T-ESD-1 | V-218770: Cookies exchanged between the IIS 10.0 website and the client must have cookie properties set to pro | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00126 | T-ESD-1 | V-218782: The required DoD banner page must be displayed to authenticated users accessing a DoD private websit | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00127 | T-ESD-1 | V-228355: Exchange servers must use approved DoD certificates. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00128 | T-ESD-1 | V-228358: The Exchange Email Diagnostic log level must be set to the lowest level. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00129 | T-ESD-1 | V-228361: Exchange Email Subject Line logging must be disabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00130 | T-ESD-1 | V-228363: Exchange Queue monitoring must be configured with threshold and action. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00131 | T-ESD-1 | V-228370: Exchange Local machine policy must require signed scripts. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00132 | T-ESD-1 | V-228371: The Exchange Internet Message Access Protocol 4 (IMAP4) service must be disabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00133 | T-ESD-1 | V-228372: The Exchange Post Office Protocol 3 (POP3) service must be disabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00134 | T-ESD-1 | V-228376: Exchange Mailboxes must be retained until backups are complete. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00141 | T-ESD-1 | V-228391: Exchange Internal Receive connectors must not allow anonymous connections. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00142 | T-ESD-1 | V-228392: Exchange external/Internet-bound automated response messages must be disabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00144 | T-ESD-1 | V-228402: Exchange software must be monitored for unauthorized changes. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00145 | T-ESD-1 | V-228404: Exchange Outlook Anywhere clients must use NTLM authentication to access email. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00146 | T-ESD-1 | V-228406: Exchange must not send delivery reports to remote domains. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00147 | T-ESD-1 | V-228407: Exchange must not send nondelivery reports to remote domains. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00148 | T-ESD-1 | V-228408: The Exchange SMTP automated banner response must not reveal server details. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00149 | T-ESD-1 | V-228409: Exchange Internal Send connectors must use an authentication level. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00150 | T-ESD-1 | V-228410: Exchange must provide Mailbox databases in a highly available and redundant configuration. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00151 | T-ESD-1 | V-228417: Exchange must have forms-based authentication disabled. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00152 | T-ESD-1 | V-228418: Exchange must have authenticated access set to Integrated Windows Authentication only. | CAT I |
|
Open | 5 days left | View Mappings | ||
| POAM-00153 | T-ESD-1 | V-224824: Manually managed application account passwords must be changed at least annually or when a system ad | CAT I |
|
Open | 5 days left | View Mappings |
Page 3 of 5