STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 02 Jul 2025:

The HP FlexFabric Switch must automatically disable accounts after a 35-day period of account inactivity.

DISA Rule

SV-230161r961863_rule

Vulnerability Number

V-230161

Group Title

SRG-APP-000516-NDM-000317

Rule Version

HFFS-ND-000008

Severity

CAT III

CCI(s)

• CCI-000017 - Disable accounts when the accounts have been inactive for the organization-defined time-period.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to automatically disable accounts after 35 days of inactivity:

[HP]password-control login idle-time 35

Check Contents

Review the HP FlexFabric Switch configuration to determine if it automatically disables accounts after 35 days.

[HP] display password-control

Global password control configurations:

User account idle time: 35 days

If accounts are not automatically disabled after 35 days of inactivity, this is a finding.

Vulnerability Number

V-230161

Documentable

False

Rule Version

HFFS-ND-000008

Severity Override Guidance

Review the HP FlexFabric Switch configuration to determine if it automatically disables accounts after 35 days.

[HP] display password-control

Global password control configurations:

User account idle time: 35 days

If accounts are not automatically disabled after 35 days of inactivity, this is a finding.

Check Content Reference

M

Target Key

4037