STIGQter STIGQter: STIG Summary: Forescout Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

Forescout must enforce a minimum 15-character password length.

DISA Rule

SV-230965r615886_rule

Vulnerability Number

V-230965

Group Title

SRG-APP-000164-NDM-000252

Rule Version

FORE-NM-000390

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Log on to the Forescout Administrator UI.

1. From the menu, select Tools >> Options >> CounterACT User Profiles >> Password and Sessions.
2. Configure the "minimum length" for "15".

Check Contents

Determine if the network device enforces a minimum 15-character password length. This requirement may be verified by demonstration or configuration review.

1. Log on to the Forescout Administrator UI.
2. From the menu, select Tools >> Options >> CounterACT User Profiles >> Password and Sessions.
3. Verify the "minimum length" is configured for "15".

If Forescout does not enforce a minimum 15-character password length, this is a finding.

Vulnerability Number

V-230965

Documentable

False

Rule Version

FORE-NM-000390

Severity Override Guidance

Determine if the network device enforces a minimum 15-character password length. This requirement may be verified by demonstration or configuration review.

1. Log on to the Forescout Administrator UI.
2. From the menu, select Tools >> Options >> CounterACT User Profiles >> Password and Sessions.
3. Verify the "minimum length" is configured for "15".

If Forescout does not enforce a minimum 15-character password length, this is a finding.

Check Content Reference

M

Target Key

5245

Comments