DISA has released the following updated Security Guidance, Security Readiness Review Scripts and Benchmarks

DISA has released the following updated Security Guidance, Security Readiness Review Scripts and Benchmarks

STIG Update – DISA has released the following updated Security Guidance, Security Readiness Review Scripts and Benchmarks
DISA has released the following updated Security Guidance, Security Readiness Review Scripts and Benchmarks:

Unclassified SRGs: http://iase.disa.mil/stigs/Pages/a-z.aspx
Database SRG – Ver 2, Rel 7
Intrusion Detection and Prevention System SRG – Ver 2, Rel 3
Mainframe Product SRG – Ver 1, Rel 2
Network Device Management SRG – Ver 2, Rel 11

Unclassified Application STIGs: http://iase.disa.mil/stigs/app-security/Pages/index.aspx
Adobe Coldfusion 11 STIG – Ver 1, Rel 3
Apache 2.2 STIG Windows – Ver 1, Rel 11
Esri ArcGIS Server 10.3 STIG – Ver 1, Rel 2
Google Chrome Browser STIG – Ver 1, Rel 9
IIS 7.0 STIG – Ver 1, Rel 14
McAfee Virus Scan 8.8 Managed Client STIG – Ver 5, Rel 16
Microsoft Exchange 2010 Mailbox STIG – Ver 1, Rel 10
Microsoft Internet Explorer 11 STIG – Ver 1, Rel 13
Microsoft .Net Framework 4 STIG – Ver 1, Rel 4
Microsoft Office System 2010 STIG – Ver 1, Rel 11
Microsoft Office System 2013 STIG – Ver 1, Rel 5
Microsoft Outlook 2016 STIG – Ver 1, Rel 2
Microsoft Project 2013 STIG – Ver 1, Rel 3
Microsoft SQL Server 2012 STIG – Ver 1, Rel 15
Microsoft SQL Server 2014 Database STIG – Ver 1, Rel 5
Microsoft SQL Server 2014 Instance STIG – Ver 1, Rel 6
Mozilla Firefox STIG – Ver 4, Rel 19
Oracle JRE 8 Windows STIG – Ver 1, Rel 4
Oracle 11g Database STIG – Ver 8, Rel 20
Oracle 11.2g Database STIG – Ver 1, Rel 12
Oracle 12c Database STIG – Ver 1, Rel 8

Unclassified Mobility STIG: http://iase.disa.mil/stigs/mobility/Pages/index.aspx
Mobile Iron Core v9.x STIG – Ver 1, Rel 3

Unclassified Network STIGs: http://iase.disa.mil/stigs/net_perimeter/Pages/index.aspx
BIND 9.x STIG – Ver 1, Rel 2
F5 Big-IP Device Management 11.x STIG – Ver 1, Rel 5
HPE 3PAR StoreServ 3.2.x STIG – Ver 1, Rel 3
Infoblox 7.x Domain Name System (DNS) STIG – Ver 1, Rel 4
Juniper SRX Services Gateway (SG) Intrusion Detection and Prevention System (IDPS) STIG – Ver 1, Rel 2
Microsoft Windows 2012 Server DNS STIG – Ver 1, Rel 7
MultiFunction Device and Network Printers STIG – Ver 2, Rel 10
Network Firewall STIG – Ver 8, Rel 23
Network Infrastructure Router L3 Switch STIG – Ver 8, Rel 23
Network L2 Switch STIG – Ver 8, Rel 21
Network Perimeter Router L3 Switch STIG – Ver 8, Rel 26
Palo Alto Networks Application Layer Gateway (ALG) STIG – Ver 1, Rel 3
Palo Alto Networks Network Device Management (NDM) STIG – Ver 1, Rel 3
Removable Storage STIG – Ver 1, Rel 6
Removable Storage STIG Ver 1, Rel 5

Unclassified Operating System STIGs: http://iase.disa.mil/stigs/os/Pages/index.aspx
Apple OS X 10.11 STIG – Ver 1, Rel 5
HP-UX 11.31 Manual STIG – Ver 1, Rel 14
Microsoft Windows 2008 DC STIG – Ver 6, Rel 37
Microsoft Windows 2008 MS STIG – Ver 6, Rel 37
Microsoft Windows 2008 R2 DC STIG – Ver 1, Rel 23
Microsoft Windows 2008 R2 MS STIG – Ver 1, Rel 23
Microsoft Windows 2012 and 2012 R2 DC STIG – Ver 2, Rel 9
Microsoft Windows 2012 and 2012 R2 MS STIG – Ver 2, Rel 9
Microsoft Windows Server 2016 STIG – Ver 1, Rel 2
Microsoft Windows 7 STIG – Ver 1, Rel 27
Microsoft Windows 8/8.1 STIG – Ver 1, Rel 18
Oracle Linux 5 Manual STIG – Ver 1, Rel 11
Red Hat 6 STIG – Ver 1, Rel 16
Red Hat 7 STIG – Ver 1, Rel 2
Solaris 10 SPARC Manual STIG – Ver 1, Rel 19
Solaris 10 x86 Manual STIG – Ver 1, Rel 19
Solaris 11 SPARC Manual STIG – Ver 1, Rel 12
Solaris 11 x86 Manual STIG – Ver 1, Rel 12
SUSE Linux Enterprise Server (SLES) v11 for System z STIG – Ver 1, Rel 10
VMware ESXi 5 Virtual Machine STIG – Ver 1, Rel 7
VMware vSphere 6.0 ESXi STIG – Ver 1, Rel 4
VMware vSphere 6.0 vCenter Server for Windows STIG – Ver 1, Rel 4
zOS ACF2 STIG – Ver 6, Rel 32
zOS RACF STIG – Ver 6, Rel 32
zOS TSS STIG – Ver 6, Rel 32

FOUO HBSS STIGs: http://iase.disa.mil/stigs/hbss/Pages/index.aspx
NOTE: DoD PKI Certificate Required
HBSS ePO 5.x STIG – Ver 1, Rel 13
HBSS HIP 8 Firewall STIG – Ver 1, Rel 9
HBSS McAfee Agent STIG – Ver 4, Rel 14
HBSS Remote Console STIG – Ver 4, Rel 14
HBSS Rogue Sensor STIG – Ver 4, Rel 9

FOUO Network STIGs: http://iase.disa.mil/stigs/net_perimeter/Pages/index.aspx
NOTE: DoD PKI Certificate Required
DoD Internet – NIPRNet DMZ STIG – Ver 3, Rel 4
JIE Core Data Center (CDC) STIG – Ver 2, Rel 2
JIE Installation Processing Node (IPN) STIG – Ver 2, Rel 2

Benchmarks: http://iase.disa.mil/stigs/scap/Pages/index.aspx
Google Chrome for Windows STIG Benchmark Ver 1, Rel 4
Microsoft Internet Explorer 11 STIG Benchmark Ver 1, Rel 10
Microsoft Office System 2010 STIG Benchmark – Ver 1, Rel 3 (SCC tool use only)
Microsoft Office System 2013 STIG Benchmark – Ver 1, Rel 4 (SCC tool use only)
Microsoft Outlook 2016 STIG – Ver 1, Rel 2 (SCC tool use only)
Microsoft Project 2013 STIG Benchmark – Ver 1, Rel 4 (SCC tool use only)
Microsoft Windows 2008 DC STIG Benchmark – Ver 6, Rel 39
Microsoft Windows 2008 MS STIG Benchmark – Ver 6, Rel 39
Microsoft Windows 2008 R2 DC STIG Benchmark – Ver 1, Rel 25
Microsoft Windows 2012 and 2012 R2 DC STIG Benchmark – Ver 2, Rel 9
Microsoft Windows 2012 and 2012 R2 MS STIG Benchmark – Ver 2, Rel 9
Microsoft Windows 7 STIG Benchmark – Ver 1, Rel 33
Microsoft Windows 8/8.1 STIG Benchmark – Ver 1, Rel 19
Microsoft Windows Server 2016 STIG Benchmark – Ver 1, Rel 2
Red Hat 6 STIG Benchmark – Ver 1, Rel 16
Solaris 10 SPARC STIG Benchmark – Ver 1, Rel 18
Solaris 10 x86 STIG Benchmark – Ver 1, Rel 18
Solaris 11 SPARC STIG Benchmark – Ver 1, Rel 7
Solaris 11 x86 STIG Benchmark – Ver 1, Rel 7

No Longer Supported: http://iase.disa.mil/stigs/sunset/Pages/index.aspx
Bind DNS STIG – Ver 4, Rel 1.20
Desktop Applications General STIG – Ver 4, Rel 5

For all STIG related questions, please contact the DISA STIG Customer Support Desk: disa.stig_spt@mail.mil

Leave a Comment

Your email address will not be published. Required fields are marked *

Join the ConvoCourses Community for insights, offers, and exclusive learning updates!

Shop GRC, Cyber, and IT books, audio, and merch!

Create your personalized GRC RoadMap and take control of your learning and career growth.

Check out Bruce’s Cyber GRC books on Amazon and elevate your governance, risk, and compliance skills.

Scroll to Top