SRG-OS-000191-GPOS-00080 Controls

STIG IDVersionTitleProduct
UBTU-18-010021V2R15The Ubuntu operating system must deploy Endpoint Security for Linux Threat Prevention (ENSLTP).
UBTU-20-010415V1R9The Ubuntu operating system must deploy Endpoint Security for Linux Threat Prevention (ENSLTP).
WN22-00-000290V2R1Windows Server 2022 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, where Endpoint Security Solution (ESS) is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
WN10-00-000025V2R8Windows 10 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, where ESS is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
APPL-14-000015V1R1The macOS system must employ automated mechanisms to determine the state of system components.
WN11-00-000025V2R1Windows 11 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: Continuously, where ESS is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
UBTU-22-211010V1R1Ubuntu 22.04 LTS must deploy an Endpoint Security Solution.
RHEL-08-010001V1R9The RHEL 8 operating system must implement the Endpoint Security for Linux Threat Prevention tool.
RHEL-09-211025V1R1RHEL 9 must implement the Endpoint Security for Linux Threat Prevention tool.
WN16-00-000320V2R10Windows Server 2016 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, where Endpoint Security Solution (ESS) is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
SLES-15-010001V1R9The SUSE operating system must implement the Endpoint Security for Linux Threat Prevention tool.
SLES-12-010599V2R13The SUSE operating system must implement the Endpoint Security for Linux Threat Prevention tool.
OL07-00-020019V2R14The Oracle Linux operating system must implement the Endpoint Security for Linux Threat Prevention tool.
WN19-00-000290V2R8Windows Server 2019 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, where Endpoint Security Solution (ESS) is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
OL08-00-010001V1R9The OL 8 operating system must implement the Endpoint Security for Linux Threat Prevention tool.