STIGQter: STIG Summary: Symantec Edge SWG NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Edge SWG must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.

DISA Rule

SV-279253r1170687_rule

Vulnerability Number

V-279253

Group Title

SRG-APP-000065-NDM-000214

Rule Version

SYME-ND-000500

Severity

CAT II

CCI(s)

• CCI-000044 - Enforce the organization-defined limit of consecutive invalid logon attempts by a user during the organization-defined time period.

Weight

10

Fix Recommendation

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Issue the command "security local-user-list create local".
4. Enter "security local-user-list edit local".
5. Enter "max-failed-attempts 3".
6. Enter "lockout-duration 900".
7. Enter "reset-interval 900".

Check Contents

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Issue the command "security local-user-list edit local", then type "view".

If "Max failed attempts" under "Account lockout" does not equal "3", this is finding.

If "Lockout duration" under "Account lockout" does not equal "900 seconds", this is a finding.

Vulnerability Number

V-279253

Documentable

False

Rule Version

SYME-ND-000500

Severity Override Guidance

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Issue the command "security local-user-list edit local", then type "view".

If "Max failed attempts" under "Account lockout" does not equal "3", this is finding.

If "Lockout duration" under "Account lockout" does not equal "900 seconds", this is a finding.

Check Content Reference

M

Target Key

5726