New Security Configuration Benchmark of the Center for Internet Security

CIS Apache HTTP Server 2.4 Benchmark v . .! CIS "e# Hat $nterpri%e &inu' ( Benchmark v2. .! CIS )icro%oft *in#ow% Server 2!!+ "2 Benchmark v2. .! CIS )icro%oft *in#ow% Server 2!!+ Benchmark v2. .! CIS )icro%oft *in#ow% Server 2!!, Benchmark v,. .! CIS )icro%oft *in#ow% - Benchmark v2. .! CIS )icro%oft *in#ow% .P Benchmark v,. .! CIS App/e i0S - Benchmark v .!.! The CIS Apple iOS 7 Benchmark provides prescriptive guidance for establishing a secure configuration posture for the Apple iOS version 7.0. . This guide !as tested against the Apple iOS 7.0. and the i"hone Configuration #tilit$ %i"C#& v'.(. .'00. This benchmark covers the Apple iOS 7.0. and all hard!are devices on !hich this iOS is supported. As of the publication of this guidance) mobile devices supported b$ iOS 7.0. include the follo!ing* iPhone +) +S) ,) ,S - ,C iPa# ) .ini) and !ith /etina displa$ iPo# Touch %,th 0eneration& %links to #ser 0uide& In determining recommendations) the current guidance treats all iOS mobile device platforms as having the same use cases and risk1threat scenarios. In all but a ver$ fe! cases) configuration steps) default settings) and benchmark recommended settings are identical regardless of hard!are platform2 for the fe! cases !here variation e3ists) the benchmark notes the difference !ithin the respective section. CIS S1S$ &inu' $nterpri%e Server Benchmark v .!.!

The CIS S#S4 5inu3 4nterprise Server 66 Benchmark v6.0.0 provides prescriptive guidance for establishing a secure configuration posture for S#S4 5inu3 4nterprise Server %S54S& version 66 running on 37( and 3(+ platforms. This guide !as tested against S54S 66 S"'. A/%o %ee* S1S$ &inu' $nterpri%e Server SP, 2 Security 3ui#e CIS 0rac/e So/ari% Benchmark v . .!

As there !ere several changes bet!een 66.0 and 66.6 CIS split the benchmark so proper instructions could be provided for s$stems that have not been updated to 66.6. The CIS Oracle Solaris 66 Benchmark provides prescriptive guidance for establishing a secure configuration posture for Oracle Solaris 66 on both 37( and S"A/C platforms. This guide !as tested against Solaris 66 66166 release) updated to the Soft!are /epositor$ #pdate , %S/#,&. As of the publication of this document) Solaris 66 66166 S/#, is the latest available support update for the Solaris 66 OS. The recommendations included in this document ma$ need to be ad8usted for future Solaris 66 updates. CIS 0rac/e So/ari% . Benchmark v .!.!

Boot loader and "A. configurations in particular re9uired overhauling as !ell as numerous small changes throughout the benchmark. The CIS Oracle Solaris 66.6 Benchmark provides prescriptive guidance for establishing a secure configuration posture for Oracle Solaris 66 on both 37( and S"A/C platforms. This guide !as tested against Solaris 66.6 release. As of the publication of this document) Solaris 66.6 is the latest available support update for the Solaris 66 OS. The recommendations included in this document ma$ need to be ad8usted for future Solaris 66 updates. A/%o %ee* 0rac/e So/ari% . A#mini%tration4 Security Service% CIS )icro%oft *in#ow% .P v,.!.! Benchmark CIS .icrosoft :indo!s ;" Benchmark v'.0.0 provides prescriptive guidance for establishing a secure configuration posture for .icrosoft :indo!s ;". CIS )icro%oft *in#ow% Server 2!!, Benchmark v,.!.! CIS .icrosoft :indo!s Server 00' Benchmark v'.0.0 no! combines the .ember Server and <omain Controller benchmarks !hich !ere previousl$ t!o distinct benchmarks. CIS .icrosoft :indo!s Server 00' Benchmark v'.0.0 provides prescriptive guidance for establishing a secure configuration posture for CIS .icrosoft :indo!s Server 00'. )icro%oft *in#ow% Server 2!!+ Benchmark v2.!.! CIS .icrosoft :indo!s Server 007 / Benchmark v .0.0 provides prescriptive guidance for establishing a secure configuration posture for CIS .icrosoft :indo!s Server 007 / . CIS )icro%oft *in#ow% - Benchmark v2.!.! CIS .icrosoft :indo!s 7 Benchmark v .0.0 provides prescriptive guidance for establishing a secure configuration posture for .icrosoft :indo!s 7. A/%o %ee* .S Technet = The 0cto5er 2! , %ecurity up#ate% CIS IB) AI. -. Benchmark . .! This release is a bug fi3 update. The CIS IB. AI; 7.6 Benchmark provides prescriptive guidance for establishing a secure configuration posture for AI; version 7.6 running on the "o!er S$stems platform. This guide !as tested against AI; 7.6 installed from IB. base installation media. A/%o %ee* AI. -. 6 Security 7IB)8 6 p#f9 (22 page% Source* CIS Securit$ Benchmarks Communit$ >e!sletter = <ecember 60) 06' CIS Securit$ Benchmarks Communit$ >e!sletter = October +) 06'