STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must enforce password complexity by requiring that at least one special character be used.

DISA Rule

SV-269785r1051740_rule

Vulnerability Number

V-269785

Group Title

SRG-APP-000169-NDM-000257

Rule Version

OS10-NDM-000440

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the OS10 Switch and associated authentication server to enforce password complexity by requiring that at least one special character be used:

OS10(config)# password-attributes character-restriction special-char 1

Check Contents

Where passwords are used, confirm that the OS10 Switch and associated authentication server enforces password complexity by requiring that at least one special character be used.

Review the configuration to verify that the special-char password-attribute is set to 1:

OS10# show running-configuration password-attributes
!
password-attributes character-restriction special-char 1

If the OS10 Switch and associated authentication server does not require that at least one special character be used in each password, this is a finding.

Vulnerability Number

V-269785

Documentable

False

Rule Version

OS10-NDM-000440

Severity Override Guidance

Where passwords are used, confirm that the OS10 Switch and associated authentication server enforces password complexity by requiring that at least one special character be used.

Review the configuration to verify that the special-char password-attribute is set to 1:

OS10# show running-configuration password-attributes
!
password-attributes character-restriction special-char 1

If the OS10 Switch and associated authentication server does not require that at least one special character be used in each password, this is a finding.

Check Content Reference

M

Target Key

5666