Home
Security Hardening
DISA STIG Apple Mac OSX 10 15 V1R7

DISA STIG Apple Mac OSX 10 15 V1R7

AOSX-15-000021 – The macOS system must enforce an account lockout time period of 15 minutes in which a user makes three consecutive invalid logon attempts.
Details Setting a lockout time period of 15 minutes is an effective deterrent against brute forcing that also makes allowances...
AOSX-15-000006 – The macOS system must conceal, via the session lock, information previously visible on the display with a publicly viewable image.
Details A default screen saver must be configured for all users, as the screen saver will act as a session...
AOSX-15-000022 – The macOS system must enforce the limit of three consecutive invalid logon attempts by a user before the user account is locked.
Details By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise...
AOSX-15-000007 – The macOS system must be configured to disable hot corners – bottom left
Details Although hot corners can be used to initiate a session lock or launch useful applications, they can also be...
AOSX-15-000023 – The macOS system must display the Standard Mandatory DoD Notice and Consent Banner before granting remote access to the operating system.
Details Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security...
AOSX-15-000007 – The macOS system must be configured to disable hot corners – bottom right
Details Although hot corners can be used to initiate a session lock or launch useful applications, they can also be...
AOSX-15-000007 – The macOS system must be configured to disable hot corners – top left
Details Although hot corners can be used to initiate a session lock or launch useful applications, they can also be...
AOSX-15-000007 – The macOS system must be configured to disable hot corners – top right
Details Although hot corners can be used to initiate a session lock or launch useful applications, they can also be...
AOSX-15-000008 – The macOS system must be configured with Wi-Fi support software disabled.
Details Allowing devices and users to connect to or from the system without first authenticating them allows untrusted access and...
AOSX-15-000011 – The macOS system must implement DoD-approved encryption to protect the confidentiality and integrity of remote access sessions, including transmitted data and data during preparation for transmission, and use replay-resistant authentication mechanisms and implement cryptographic mechanisms to protect the integrity of and verify remote disconnection at the termination of nonlocal maintenance and diagnostic communications – OpenSSH version
Details Without confidentiality and integrity protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session....

Prev Next

DISA STIG Apple Mac OSX 10 15 V1R7

AOSX-15-000021 – The macOS system must enforce an account lockout time period of 15 minutes in which a user makes three consecutive invalid logon attempts.

AOSX-15-000006 – The macOS system must conceal, via the session lock, information previously visible on the display with a publicly viewable image.

AOSX-15-000022 – The macOS system must enforce the limit of three consecutive invalid logon attempts by a user before the user account is locked.

AOSX-15-000007 – The macOS system must be configured to disable hot corners – bottom left

AOSX-15-000023 – The macOS system must display the Standard Mandatory DoD Notice and Consent Banner before granting remote access to the operating system.

AOSX-15-000007 – The macOS system must be configured to disable hot corners – bottom right

AOSX-15-000007 – The macOS system must be configured to disable hot corners – top left

AOSX-15-000007 – The macOS system must be configured to disable hot corners – top right

AOSX-15-000008 – The macOS system must be configured with Wi-Fi support software disabled.