STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 02 Jul 2025:

The HP FlexFabric Switch must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

DISA Rule

SV-217433r960840_rule

Vulnerability Number

V-217433

Group Title

SRG-APP-000065-NDM-000214

Rule Version

HFFS-ND-000015

Severity

CAT II

CCI(s)

• CCI-000044 - Enforce the organization-defined limit of consecutive invalid logon attempts by a user during the organization-defined time period.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period:

[HP]password-control login-attempt 3 exceed lock-time 15

Check Contents

Verify that the HP FlexFabric Switch is configured to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

[HP] display password-control

Global password control configurations:
Maximum login attempts: 3
Action for exceeding login attempts: Lock user for 15 minutes

If the limit of three consecutive invalid logon attempts by a user during a 15-minute time period is not enforced, this is a finding.

Vulnerability Number

V-217433

Documentable

False

Rule Version

HFFS-ND-000015

Severity Override Guidance

Verify that the HP FlexFabric Switch is configured to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

[HP] display password-control

Global password control configurations:
Maximum login attempts: 3
Action for exceeding login attempts: Lock user for 15 minutes

If the limit of three consecutive invalid logon attempts by a user during a 15-minute time period is not enforced, this is a finding.

Check Content Reference

M

Target Key

4037