STIGQter STIGQter: STIG Summary: Forescout Network Device Management Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

Forescout must be configured with only one web account and one CLI account of last resort with limited access and used only when the authentication server is unavailable.

DISA Rule

SV-230932r1111863_rule

Vulnerability Number

V-230932

Group Title

SRG-APP-000148-NDM-000346

Rule Version

FORE-NM-000030

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

There are two default accounts of last resort. The CLIAdmin root account can only be used to access Forescout with the CLI. Accounts created in CounterACT user profile in the management console do not have access to login to the CLI. The default console account "Admin" allows access only to the management console. These accounts can be used as the accounts of last resort or two other accounts may be created for this purpose as long as a strong password that meets DoD requirements is used for both.

1. Log on to the Forescout Administrator UI.
2. From the menu, select Tools >> Options >> CounterACT user profiles.

Remove unauthorized local accounts not identified as the account of last resort.

Check Contents

Verify only one local account exists and that it has full administrator privileges.

1. Log on to the Forescout Administrator UI.
2. From the menu, select Tools >> Options >> CounterACT User Profiles.

If local accounts in the CounterACT User profile or CLI exist other than the accounts of last resort, this is a finding.

Vulnerability Number

V-230932

Documentable

False

Rule Version

FORE-NM-000030

Severity Override Guidance

Verify only one local account exists and that it has full administrator privileges.

1. Log on to the Forescout Administrator UI.
2. From the menu, select Tools >> Options >> CounterACT User Profiles.

If local accounts in the CounterACT User profile or CLI exist other than the accounts of last resort, this is a finding.

Check Content Reference

M

Target Key

5245