STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.

DISA Rule

SV-273786r1110837_rule

Vulnerability Number

V-273786

Group Title

SRG-APP-000065-NDM-000214

Rule Version

RCKS-NDM-000120

Severity

CAT II

CCI(s)

• CCI-000044 - Enforce the organization-defined limit of consecutive invalid logon attempts by a user during the organization-defined time period.

Weight

10

Fix Recommendation

Configure the network device to enforce the limit of three consecutive invalid logon attempts during a 15-minute time period.

enable user disable-on-login-failure 3 login-recovery-time in-mins 15

Check Contents

Review the device configuration to verify that it enforces the limit of three consecutive invalid logon attempts.

show running-config | include disable-on-login-failure
enable user disable-on-login-failure 3 login-recovery-time in-secs 900

If the device is not configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes, this is a finding.

Vulnerability Number

V-273786

Documentable

False

Rule Version

RCKS-NDM-000120

Severity Override Guidance

Review the device configuration to verify that it enforces the limit of three consecutive invalid logon attempts.

show running-config | include disable-on-login-failure
enable user disable-on-login-failure 3 login-recovery-time in-secs 900

If the device is not configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes, this is a finding.

Check Content Reference

M

Target Key

5695