National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 541 matching records. Displaying matches 161 through 180.


Name (Version) Target Product Category Authority Last Modified Resources
CA API Gateway STIG (Version 1, Release 1) COMPUTER ASSOCIATES (CA) APPLICATION PROGRAMMING INTERFACE (API) GATEWAY Automation/Productivity Application Suite Defense Information Systems Agency 08/01/2017 Standalone XCCDF 1.1.4 - CA API Gateway ALG STIG - Ver 1, Rel 2>
Standalone XCCDF 1.1.4 - CA API Gateway NDM STIG Version 1>
Canonical Ubuntu 16.04 LTS STIG (Ver 1, Rel 1) Canonical Ubuntu 16.04 LTS (Long Term Support) Operating System Defense Information Systems Agency 09/04/2018 Standalone XCCDF 1.1.4 - Canonical Ubuntu 16.04 LTS STIG Ver 1, Rel 1>
CISCO CSS DNS STIG (Ver 4, Rel 18) CISCO CSS Domain Name System (DNS) DNS Server Defense Information Systems Agency 08/29/2017 Standalone XCCDF 1.1.4 - CISCO CSS DNS STIG - Ver 4, Rel 18>
Cisco IOS XE Release 3 STIG (Version 1 Release 3) Cisco IOS XE Operating System Defense Information Systems Agency 05/25/2018 Standalone XCCDF 1.1.4 - Cisco IOS XE Release 3 NDM STIG - Ver 1, Rel 4>
Standalone XCCDF 1.1.4 - Cisco IOS XE Release 3 RTR STIG - Ver 1, Rel 3>
Citrix XenDesktop 7.x STIG (1.0) Citrix XenDesktop 7.x Virtualization Software Defense Information Systems Agency 10/15/2018 Standalone XCCDF 1.1.4 - Citrix XenDesktop 7.x Delivery Controller STIG Version 1>
Standalone XCCDF 1.1.4 - Citrix XenDesktop 7.x License Server STIG Version 1>
Standalone XCCDF 1.1.4 - Citrix XenDesktop 7.x Receiver STIG Version 1>
Standalone XCCDF 1.1.4 - Citrix XenDesktop 7.x StoreFront STIG Version 1>
Standalone XCCDF 1.1.4 - Citrix XenDesktop 7.x Windows Virtual Delivery Agent (VDA) STIG Version 1>
DBN-6300 STIG (Version 1) DB Networks DBN-3600 Intrusion Detection System Defense Information Systems Agency 05/25/2018 Standalone XCCDF 1.1.4 - DBN-6300 IDPS STIG Version 1>
Standalone XCCDF 1.1.4 - DBN-6300 NDM STIG Version 1>
Defense Switched Network (DSN) (Version 2, Release 7) Cisco Content Services Switch Network Switch Defense Information Systems Agency 08/15/2017 Standalone XCCDF 1.1.4 - Defense Switched Network (DSN) Checklist - Version 2, Release 7>
Desktop Applications General STIG (Ver 4, Rel 4) Microsoft Internet Explorer
Netscape Navigator
Microsoft Office 2000
Microsoft Office 2003
Microsoft Office XP
Microsoft Outlook 2000
Microsoft Outlook 2002
Symantec Norton Antivirus 10.0
Symantec Norton Antivirus 9.0
Mcafee VirusScan 7.0
Microsoft Frontpage 2003
Microsoft Frontpage 2002
Microsoft Outlook 2007
Microsoft Word 2007
Microsoft Office 2007 SP1
Microsoft Office 2007
Web Browser
Office Suite
Antivirus Software
Desktop Application
Defense Information Systems Agency 08/15/2017 Standalone XCCDF 1.1.4 - Desktop Applications General STIG - Version 4, Release 4>
DNS Policy STIG (Ver 4, Rel 1.21) Microsoft Windows Server 2003
ISC Bind 9.3.1
ISC Bind 9.3.2
Microsoft Windows Server 2000
Microsoft Windows XP
Microsoft Windows 2000
Cisco Content Services Switch
Operating System
DNS Server
Network Switch
Defense Information Systems Agency 01/24/2018 Standalone XCCDF 1.1.4 - DNS Policy STIG - Ver 4, Rel 1.21>
Domain Name System (DNS) STIG (Version 4, Release 1.18) Microsoft Windows Server 2003
ISC Bind 9.3.1
ISC Bind 9.3.2
Microsoft Windows Server 2000
Microsoft Windows XP
Microsoft Windows 2000
Cisco Content Services Switch
Operating System
DNS Server
Network Switch
Defense Information Systems Agency 08/15/2017 Standalone XCCDF 1.1.4 - Domain Name System (DNS) STIG, Version 4, Release 1.18>
EDB Postgres Advanced Server 9 On Red Hat Enterprise Linux STIG (version 1, release 5) EDB Postgres Advanced Server Database Management System Defense Information Systems Agency 10/25/2018 Standalone XCCDF 1.1.4 - EDB Postgres Advanced Server STIG - Ver 1, Rel 5>
Microsoft Exchange Server 2013 (Version 1, Release 2) Microsoft Exchange Server 2013 Email Server Defense Information Systems Agency 10/25/2018 Standalone XCCDF 1.1.4 - Email Services Policy STIG - Ver 2, Rel 6>
Standalone XCCDF 1.1.4 - Microsoft Exchange 2013 Client Access STIG - Ver 1, Rel 1>
Standalone XCCDF 1.1.4 - Microsoft Exchange 2013 Edge STIG - Ver 1, Rel 3>
Standalone XCCDF 1.1.4 - Microsoft Exchange 2013 Mailbox STIG - Ver 1, Rel 2>
Esri ArcGIS Server 10.3 STIG (Ver 1, Rel 3) Esri ArcGIS Server Application Server Defense Information Systems Agency 03/16/2018 Standalone XCCDF 1.1.4 - Esri ArcGIS Server 10.3 STIG - Ver 1, Rel 3>
F5 BIG-IP Access Policy Manager (APM) STIG (11.x) F5 BIG-IP Access Policy Manager (APM) 11.x STIG Authentication Defense Information Systems Agency 08/02/2017 Standalone XCCDF 1.1.4 - F5 BIG-IP Access Policy Manager (APM) 11.x STIG>
F5 BIG-IP Advanced Firewall Manager (AFM) STIG (11.x) F5 BIG-IP Advanced Firewall Manager (AFM) 11.x STIG Firewall Defense Information Systems Agency 08/02/2017 Standalone XCCDF 1.1.4 - F5 BIG-IP Advanced Firewall Manager (AFM) 11.x STIG>
F5 BIG-IP Application Security Manager (ASM) STIG (11.x) F5 BIG-IP Application Security Manager (ASM) 11.x STIG Firewall Defense Information Systems Agency 08/02/2017 Standalone XCCDF 1.1.4 - F5 BIG-IP Application Security Manager (ASM) 11.x STIG>
F5 BIG-IP Device Management 11.x STIG (Version 1, Release 5) F5 BIG-IP Device Management 11.x STIG Firewall Defense Information Systems Agency 08/02/2017 Standalone XCCDF 1.1.4 - F5 Big-IP Device Management 11.x STIG - Ver 1, Rel 5>
F5 BIG-IP Local Traffic Manager (LTM) 11.x STIG (version 1, release 2) F5 BIG-IP Local Traffic Manager (LTM) 11.x STIG Firewall Defense Information Systems Agency 08/02/2017 Standalone XCCDF 1.1.4 - F5 BIG-IP Local Traffic Manager (LTM) 11.x STIG - Ver 1, Rel 2>
ForeScout CounterACT STIG (Version 2) ForeScout CounterACT NDM
ForeScout CounterACT ALG
Defense Information Systems Agency 05/09/2018 Standalone XCCDF 1.1.4 - ForeScout CounterACT ALG STIG - Ver 1, Rel 2>
Standalone XCCDF 1.1.4 - ForeScout CounterACT NDM STIG Version 1>
Good for Enterprise 8.x STIG (Version 1, Release 1) Mobile Device Manager for the Blackberry Enterprise Server Mobile Solution Defense Information Systems Agency 11/13/2017 Standalone XCCDF 1.1.4 - Good for Enterprise 8.x STIG - Version 1, Release 1>
* This checklist is still undergoing review for inclusion into the NCP.