STIGQter STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 02 Jul 2025:

The HP FlexFabric Switch must enforce 24 hours/1 day as the minimum password lifetime.

DISA Rule

SV-230168r1113784_rule

Vulnerability Number

V-230168

Group Title

SRG-APP-000516-NDM-000317

Rule Version

HFFS-ND-000062

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to enforce 24 hours/1 day as the minimum password lifetime.

[HP] password-control enable
[HP] password-control update-interval 24

Check Contents

Determine if the HP FlexFabric Switch enforces 24 hours/1 day as the minimum password lifetime.

[HP] display password-control

Global password control configurations:
Password control: Enabled
Password aging: Enabled (60 days)
Password length: Enabled (15 characters)
Password composition: Enabled (1 types, 1 characters per type)
Password history: Enabled (max history records: 4)
Early notice on password expiration: 7 days
Maximum login attempts: 3
Action for exceeding login attempts: Lock user for 1 minutes
Minimum interval between two updates: 24 hours

If the HP FlexFabric Switch does not have password control enabled and does not enforce 24 hours/1 day as the minimum password lifetime, this is a finding.

Vulnerability Number

V-230168

Documentable

False

Rule Version

HFFS-ND-000062

Severity Override Guidance

Determine if the HP FlexFabric Switch enforces 24 hours/1 day as the minimum password lifetime.

[HP] display password-control

Global password control configurations:
Password control: Enabled
Password aging: Enabled (60 days)
Password length: Enabled (15 characters)
Password composition: Enabled (1 types, 1 characters per type)
Password history: Enabled (max history records: 4)
Early notice on password expiration: 7 days
Maximum login attempts: 3
Action for exceeding login attempts: Lock user for 1 minutes
Minimum interval between two updates: 24 hours

If the HP FlexFabric Switch does not have password control enabled and does not enforce 24 hours/1 day as the minimum password lifetime, this is a finding.

Check Content Reference

M

Target Key

4037