Framework files
The library is organised by platform and topic. To check devices against a framework instead, use the stock framework files. Each one collects the hardening rules for one vendor that reference one framework, copied unchanged from the topic files. They are part of release v1.4.0 and you load them with Import Templates (see importing a stock template).
| Framework | Cisco IOS | Fortinet FortiOS | Juniper Junos |
|---|---|---|---|
| NIST SP 800-53 | ios-nist-800-53.policy (26 rules) | fortios-nist-800-53.policy (8 rules) | junos-nist-800-53.policy (10 rules) |
| NIST CSF 1.1 | None | fortios-nist-csf.policy (2 rules) | junos-nist-csf.policy (2 rules) |
| HIPAA Security Rule (45 CFR 164.312) | ios-hipaa.policy (11 rules) | fortios-hipaa.policy (7 rules) | junos-hipaa.policy (10 rules) |
| ISO/IEC 27001:2022 Annex A | ios-iso27001.policy (31 rules) | fortios-iso27001.policy (10 rules) | junos-iso27001.policy (15 rules) |
No Cisco IOS rule references NIST CSF 1.1, so there is no Cisco file for it. F5 BIG-IP and MikroTik RouterOS have no framework files.
For what each rule checks, its control references and its known limitations, see the vendor pages: Cisco IOS, Fortinet FortiOS and Juniper Junos.
The worked-example rule pages under Platforms are not mapped to frameworks yet, and show “Not yet mapped” in their framework mapping table.