## References for product vsel

- disa

- CCI-000870

- scanned_mediaThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must scan all media used for system maintenance prior to use

- CCI-001240

- dats_updatedThe anti-virus signature file age must not exceed 7 days
- virus_notificationA notification mechanism or process must be in place to notify Administrators of out of date DAT, detected malware and error codes

- CCI-001241

- ods_action_app_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean as first action when a virus or Trojan is detected
- ods_action_app_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Quarantine if first action fails when a virus or Trojan is detected
- ods_action_default_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean as first action when programs and jokes are found
- ods_action_default_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Quarantine if first action fails when programs and jokes are found
- ods_allFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to scan all file types
- ods_decompArchiveThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decompress archives when scanning
- ods_enabledThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to run a scheduled On-Demand scan at least once a week
- ods_exclusionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must only be configured with exclusions that are documented and approved by the ISSO/ISSM/AO
- ods_extensionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to include all local drives and their sub-directories
- ods_heuristicAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown program viruses
- ods_macroAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown macro viruses
- ods_mimeThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decode MIME encoded files.
- ods_programThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find potentially unwanted programs

- CCI-001242

- oas_scanNWFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed
- ods_scanNWFiles_local The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed

- CCI-001243

- dats_auto_updateThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to receive automatic updates
- oas_action_app_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when a virus or Trojan is detected
- oas_action_app_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Quarantine if first action fails when a virus or Trojan is detected
- oas_action_default_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when programs and jokes are found
- oas_action_default_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Quarantine if first action fails when programs and jokes are found
- oas_action_errorThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to deny access to the file if an error occurs during scanning
- oas_action_timeoutThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to allow access to files if scanning times out
- oas_allFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan all file types
- oas_decompArchiveThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to decompress archives when scanning
- oas_enabledThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to enable On-Access scanning
- oas_exclusionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must only be configured with exclusions that are documented and approved by the ISSO/ISSM/AO
- oas_heuristicAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown program viruses
- oas_macroAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown macro viruses
- oas_programThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find potentially unwanted programs
- oas_scanMaxTmoThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner maximum scan time must not be less than 45 seconds
- oas_scanOnReadThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being read from disk
- oas_scanOnWriteThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being written to disk

- CCI-001749

- updates_sourceThe McAfee VirusScan Enterprise must be configured to receive all patches, service packs and updates from a DoD-managed source

- CCI-001813

- web_client_disabledThe McAfee VirusScan Enterprise for Linux Web interface must be disabled unless the system is on a segregated network
- web_client_firewalledAccess to the McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x Web UI must be enforced by firewall rules

- CCI-002235

- restricted_userThe nails user and nailsgroup group must be restricted to the least privilege access required for the intended role

- nist

- AC-6(10)

- restricted_userThe nails user and nailsgroup group must be restricted to the least privilege access required for the intended role

- CM-5

- updates_sourceThe McAfee VirusScan Enterprise must be configured to receive all patches, service packs and updates from a DoD-managed source
- web_client_firewalledAccess to the McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x Web UI must be enforced by firewall rules

- CM-5(1)

- web_client_disabledThe McAfee VirusScan Enterprise for Linux Web interface must be disabled unless the system is on a segregated network

- MA-3(2)

- scanned_mediaThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must scan all media used for system maintenance prior to use

- SI-3

- dats_auto_updateThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to receive automatic updates
- dats_updatedThe anti-virus signature file age must not exceed 7 days
- oas_action_app_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when a virus or Trojan is detected
- oas_action_app_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Quarantine if first action fails when a virus or Trojan is detected
- oas_action_default_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when programs and jokes are found
- oas_action_default_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Quarantine if first action fails when programs and jokes are found
- oas_action_errorThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to deny access to the file if an error occurs during scanning
- oas_action_timeoutThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to allow access to files if scanning times out
- oas_allFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan all file types
- oas_decompArchiveThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to decompress archives when scanning
- oas_enabledThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to enable On-Access scanning
- oas_exclusionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must only be configured with exclusions that are documented and approved by the ISSO/ISSM/AO
- oas_heuristicAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown program viruses
- oas_macroAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown macro viruses
- oas_programThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find potentially unwanted programs
- oas_scanMaxTmoThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner maximum scan time must not be less than 45 seconds
- oas_scanNWFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed
- oas_scanOnReadThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being read from disk
- oas_scanOnWriteThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being written to disk
- ods_action_app_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean as first action when a virus or Trojan is detected
- ods_action_app_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Quarantine if first action fails when a virus or Trojan is detected
- ods_action_default_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean as first action when programs and jokes are found
- ods_action_default_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Quarantine if first action fails when programs and jokes are found
- ods_allFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to scan all file types
- ods_decompArchiveThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decompress archives when scanning
- ods_enabledThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to run a scheduled On-Demand scan at least once a week
- ods_exclusionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must only be configured with exclusions that are documented and approved by the ISSO/ISSM/AO
- ods_extensionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to include all local drives and their sub-directories
- ods_heuristicAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown program viruses
- ods_macroAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown macro viruses
- ods_mimeThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decode MIME encoded files.
- ods_programThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find potentially unwanted programs
- ods_scanNWFiles_local The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed
- virus_notificationA notification mechanism or process must be in place to notify Administrators of out of date DAT, detected malware and error codes

- srg

- SRG-APP-000073

- scanned_mediaThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must scan all media used for system maintenance prior to use

- SRG-APP-000131

- updates_sourceThe McAfee VirusScan Enterprise must be configured to receive all patches, service packs and updates from a DoD-managed source

- SRG-APP-000276

- dats_updatedThe anti-virus signature file age must not exceed 7 days
- virus_notificationA notification mechanism or process must be in place to notify Administrators of out of date DAT, detected malware and error codes

- SRG-APP-000277

- ods_action_app_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean as first action when a virus or Trojan is detected
- ods_action_app_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Quarantine if first action fails when a virus or Trojan is detected
- ods_action_default_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean as first action when programs and jokes are found
- ods_action_default_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Quarantine if first action fails when programs and jokes are found
- ods_allFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to scan all file types
- ods_decompArchiveThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decompress archives when scanning
- ods_enabledThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to run a scheduled On-Demand scan at least once a week
- ods_exclusionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must only be configured with exclusions that are documented and approved by the ISSO/ISSM/AO
- ods_extensionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to include all local drives and their sub-directories
- ods_heuristicAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown program viruses
- ods_macroAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown macro viruses
- ods_mimeThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decode MIME encoded files.
- ods_programThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find potentially unwanted programs

- SRG-APP-000278

- oas_scanNWFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed
- ods_scanNWFiles_local The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed

- SRG-APP-000279

- dats_auto_updateThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to receive automatic updates
- oas_action_app_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when a virus or Trojan is detected
- oas_action_app_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Quarantine if first action fails when a virus or Trojan is detected
- oas_action_default_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when programs and jokes are found
- oas_action_default_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Quarantine if first action fails when programs and jokes are found
- oas_action_errorThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to deny access to the file if an error occurs during scanning
- oas_action_timeoutThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to allow access to files if scanning times out
- oas_allFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan all file types
- oas_decompArchiveThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to decompress archives when scanning
- oas_enabledThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to enable On-Access scanning
- oas_exclusionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must only be configured with exclusions that are documented and approved by the ISSO/ISSM/AO
- oas_heuristicAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown program viruses
- oas_macroAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown macro viruses
- oas_programThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find potentially unwanted programs
- oas_scanMaxTmoThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner maximum scan time must not be less than 45 seconds
- oas_scanOnReadThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being read from disk
- oas_scanOnWriteThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being written to disk

- SRG-APP-000340

- restricted_userThe nails user and nailsgroup group must be restricted to the least privilege access required for the intended role

- SRG-APP-000380

- web_client_disabledThe McAfee VirusScan Enterprise for Linux Web interface must be disabled unless the system is on a segregated network
- web_client_firewalledAccess to the McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x Web UI must be enforced by firewall rules

- stigid

- DTAVSEL-000

- web_client_disabledThe McAfee VirusScan Enterprise for Linux Web interface must be disabled unless the system is on a segregated network

- DTAVSEL-001

- dats_updatedThe anti-virus signature file age must not exceed 7 days

- DTAVSEL-002

- dats_auto_updateThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to receive automatic updates

- DTAVSEL-003

- oas_enabledThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to enable On-Access scanning

- DTAVSEL-004

- oas_decompArchiveThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to decompress archives when scanning

- DTAVSEL-005

- oas_heuristicAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown program viruses

- DTAVSEL-006

- oas_macroAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown macro viruses

- DTAVSEL-007

- oas_programThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find potentially unwanted programs

- DTAVSEL-008

- oas_scanOnWriteThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being written to disk

- DTAVSEL-009

- oas_scanOnReadThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being read from disk

- DTAVSEL-010

- oas_allFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan all file types
- oas_scanMaxTmoThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner maximum scan time must not be less than 45 seconds

- DTAVSEL-012

- oas_exclusionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must only be configured with exclusions that are documented and approved by the ISSO/ISSM/AO

- DTAVSEL-013

- oas_action_app_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when a virus or Trojan is detected

- DTAVSEL-014

- oas_action_app_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Quarantine if first action fails when a virus or Trojan is detected

- DTAVSEL-015

- oas_action_default_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when programs and jokes are found

- DTAVSEL-016

- oas_action_default_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Quarantine if first action fails when programs and jokes are found

- DTAVSEL-017

- oas_action_errorThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to deny access to the file if an error occurs during scanning

- DTAVSEL-018

- oas_action_timeoutThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to allow access to files if scanning times out

- DTAVSEL-019

- oas_scanNWFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed
- ods_scanNWFiles_local The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be enabled to scan mounted volumes when mounted volumes point to a network server without an anti-virus solution installed

- DTAVSEL-100

- ods_enabledThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must be configured to run a scheduled On-Demand scan at least once a week

- DTAVSEL-101

- ods_decompArchiveThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decompress archives when scanning

- DTAVSEL-102

- ods_heuristicAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown program viruses

- DTAVSEL-103

- ods_macroAnalysisThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find unknown macro viruses

- DTAVSEL-104

- ods_programThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to find potentially unwanted programs

- DTAVSEL-105

- ods_allFilesThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to scan all file types

- DTAVSEL-106

- ods_action_app_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean as first action when a virus or Trojan is detected

- DTAVSEL-107

- ods_action_app_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Quarantine if first action fails when a virus or Trojan is detected

- DTAVSEL-108

- ods_exclusionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must only be configured with exclusions that are documented and approved by the ISSO/ISSM/AO

- DTAVSEL-110

- ods_action_default_primaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Clean as first action when programs and jokes are found

- DTAVSEL-111

- ods_action_default_secondaryThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to Quarantine if first action fails when programs and jokes are found

- DTAVSEL-112

- ods_mimeThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decode MIME encoded files.

- DTAVSEL-113

- ods_extensionsThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to include all local drives and their sub-directories

- DTAVSEL-200

- scanned_mediaThe McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must scan all media used for system maintenance prior to use

- DTAVSEL-201

- updates_sourceThe McAfee VirusScan Enterprise must be configured to receive all patches, service packs and updates from a DoD-managed source

- DTAVSEL-202

- restricted_userThe nails user and nailsgroup group must be restricted to the least privilege access required for the intended role

- DTAVSEL-205

- virus_notificationA notification mechanism or process must be in place to notify Administrators of out of date DAT, detected malware and error codes

- DTAVSEL-301

- web_client_firewalledAccess to the McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x Web UI must be enforced by firewall rules