STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must enforce password complexity and length requirements.

DISA Rule

SV-273802r1110842_rule

Vulnerability Number

V-273802

Group Title

SRG-APP-000164-NDM-000252

Rule Version

RCKS-NDM-000390

Severity

CAT II

CCI(s)

CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

Fix Recommendation

Configure strict password enforcement:

SSH@ICX(config)# enable strict-password-enforcement

Check Contents

Verify strict password enforcement is configured:

SSH@ICX(config)#show running-config | include strict-password-enforcement

If strict-password-enforcement is not configured, this is a finding.

Vulnerability Number

V-273802

Documentable

False

Rule Version

RCKS-NDM-000390

Severity Override Guidance

Verify strict password enforcement is configured:

SSH@ICX(config)#show running-config | include strict-password-enforcement

If strict-password-enforcement is not configured, this is a finding.

Check Content Reference

Target Key

5695