STIGQter: STIG Summary: Ivanti Sentry 9.x NDM Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

Sentry must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.

DISA Rule

SV-250986r1028213_rule

Vulnerability Number

V-250986

Group Title

SRG-APP-000065-NDM-000214

Rule Version

MOIS-ND-000140

Severity

CAT III

CCI(s)

CCI-000044 - Enforce the organization-defined limit of consecutive invalid logon attempts by a user during the organization-defined time period.

Weight

Fix Recommendation

Configure Sentry to enforce the limit of three consecutive invalid login attempts during a 15-minute time period.

1. Log in to Sentry System Manager portal.
2. Go to the "Security" tab.
3. Go to "Password Policy".
4. For "Number of Failed Attempts", set value to 3.
5. For "Auto-Lock Time", set value to 900 seconds or more.

Check Contents

Review Sentry configuration to verify that it enforces the limit of three consecutive invalid logon attempts.

1. Log in to Sentry System Manager portal.
2. Go to the "Security" tab.
3. Go to "Password Policy".
4. Look for "Number of Failed Attempts" and determine if the value is set to 3. If it is not, this is a finding.
5. Verify the Auto-Lock Time value is set to 900 seconds or more.

If the Auto-Lock Time is not set to 900 seconds or more, this is a finding.

Sentry must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key