STIGQter: STIG Summary: Cisco ASA NDM Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Cisco ASA must be configured to enforce a minimum 15-character password length.

DISA Rule

SV-239914r1015256_rule

Vulnerability Number

V-239914

Group Title

SRG-APP-000164-NDM-000252

Rule Version

CASA-ND-000490

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the Cisco ASA to enforce password complexity by requiring a minimum 15-character password length as shown in the example below.

ASA(config)# password-policy minimum-length 15

Check Contents

Review the ASA configuration to verify that it is compliant with this requirement as shown in the example below.

password-policy minimum-length 15

If the ASA is not configured to enforce a minimum 15-character password length, this is a finding.

Vulnerability Number

V-239914

Documentable

False

Rule Version

CASA-ND-000490

Severity Override Guidance

Review the ASA configuration to verify that it is compliant with this requirement as shown in the example below.

password-policy minimum-length 15

If the ASA is not configured to enforce a minimum 15-character password length, this is a finding.

Check Content Reference

M

Target Key

5342