STIGQter: STIG Summary: Network Device Management Security Requirements Guide Version: 4 Release: 1 Benchmark Date: 23 Apr 2021:

The network device must enforce a minimum 15-character password length.

DISA Rule

SV-202057r397501_rule

Vulnerability Number

V-202057

Group Title

SRG-APP-000164

Rule Version

SRG-APP-000164-NDM-000252

Severity

CAT II

CCI(s)

• CCI-000205 - The information system enforces minimum password length.

Weight

10

Fix Recommendation

Configure the network device or its associated authentication server to enforce a minimum 15-character password length.

Check Contents

Determine if the network device or its associated authentication server enforces a minimum 15-character password length. This requirement may be verified by demonstration or configuration review. If the network device or its associated authentication server does not enforce a minimum 15-character password length, this is a finding.

Vulnerability Number

V-202057

Documentable

False

Rule Version

SRG-APP-000164-NDM-000252

Severity Override Guidance

Determine if the network device or its associated authentication server enforces a minimum 15-character password length. This requirement may be verified by demonstration or configuration review. If the network device or its associated authentication server does not enforce a minimum 15-character password length, this is a finding.

Check Content Reference

M

Target Key

2890

Comments