STIGhub— A free STIG search and compliance tool·STIGs updated 2 hours ago

Powered by Pylon·Privacy·Terms·Feedback·© 2026 Beacon Cloud Solutions, Inc.

← Back to STIGs

Omnissa Horizon Agent Security Technical Implementation Guide

Version

V1R1

Release Date

Oct 8, 2026

SCAP Benchmark ID

Omnissa_Horizon_Agent

Total Checks

20

Tags

other

CAT I: 2CAT II: 18CAT III: 0

This Security Technical Implementation Guide is published as a tool to improve the security of Department of War (DoW) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.

Export CKL Export CSV Export JSON Download STIG ZIP

Checks (20)

V-286829MEDIUMThe Horizon Agent must set a session idle timeout.V-286830MEDIUMThe Horizon Agent must set a disconnected session time limit.V-286831MEDIUMThe Horizon Agent must set an RDS connection to disconnect after an organization-defined maximum time.V-286832MEDIUMThe Horizon Agent must set an RDS disconnected session time limit.V-286833HIGHThe Horizon Agent must be installed in FIPS mode.V-286834MEDIUMThe Horizon Agent must disable access to a virtual desktop infrastructure (VDI) PC-over-IP (PCoIP) session from a vSphere console.V-286835MEDIUMThe Horizon Agent must enable screen blanking for Blast to disable access to a VDI Blast session from a vSphere console.V-286836MEDIUMThe Horizon Agent must block USB mass storage.V-286837MEDIUMThe Horizon Agent must not allow client drive redirection.V-286838MEDIUMThe Horizon Agent must audit clipboard actions.V-286839MEDIUMThe Horizon Agent must not allow file transfers.V-286840MEDIUMThe Horizon Agent must not allow drag and drop.V-286841MEDIUMThe Horizon Agent must not redirect client printers.V-286842MEDIUMThe Horizon Agent must block VDI desktop-to-client clipboard actions.V-286843MEDIUMThe Horizon Agent must only run allowed scripts on user connect.V-286844MEDIUMThe Horizon Agent must disable TrueSSO.V-286845MEDIUMThe Horizon Agent must validate the entire issuance chain of certificates.V-286846HIGHThe Horizon Agent must be a version supported by Omnissa.V-286847MEDIUMThe Horizon Agent must only run allowed scripts on user disconnect.V-286848MEDIUMThe Horizon Agent must only run allowed scripts on user reconnect.